emilsoftware-utilities 1.8.0-dev.2 → 2.0.0-dev.2

package/dist/Utilities.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DatabaseUtilities = exports.CryptUtilities = exports.RestUtilities = exports.DateUtilities = exports.StatusCode = void 0;
+exports.DatabaseUtilities = exports.PasswordUtilities = exports.CryptUtilities = exports.RestUtilities = exports.DateUtilities = exports.StatusCode = void 0;
 exports.Deprecated = Deprecated;
 const crypto_1 = __importDefault(require("crypto"));
 var StatusCode;
@@ -277,6 +277,95 @@ class CryptUtilities {
     }
 }
 exports.CryptUtilities = CryptUtilities;
+class PasswordUtilities {
+    static hashSecret(secretValue, prefix) {
+        if (typeof secretValue !== "string" || secretValue.length === 0) {
+            throw new Error("Il valore da proteggere non puo essere vuoto.");
+        }
+        const salt = crypto_1.default.randomBytes(this.SALT_LENGTH).toString("hex");
+        const derivedKey = crypto_1.default.scryptSync(secretValue, salt, 64, {
+            N: this.SCRYPT_N,
+            r: this.SCRYPT_R,
+            p: this.SCRYPT_P,
+            maxmem: 64 * 1024 * 1024,
+        });
+        return [
+            prefix,
+            this.SCRYPT_N,
+            this.SCRYPT_R,
+            this.SCRYPT_P,
+            salt,
+            derivedKey.toString("hex"),
+        ].join("$");
+    }
+    static hasPrefix(value, prefix) {
+        return typeof value === "string" && value.startsWith(`${prefix}$`);
+    }
+    static parseHash(storedPassword, expectedPrefix) {
+        if (!this.hasPrefix(storedPassword, expectedPrefix)) {
+            return null;
+        }
+        const [, rawN, rawR, rawP, salt, expectedHashHex] = storedPassword.split("$");
+        const N = Number(rawN);
+        const r = Number(rawR);
+        const p = Number(rawP);
+        if (!salt || !expectedHashHex || !Number.isFinite(N) || !Number.isFinite(r) || !Number.isFinite(p)) {
+            return null;
+        }
+        const expectedHash = Buffer.from(expectedHashHex, "hex");
+        if (expectedHash.length === 0) {
+            return null;
+        }
+        return {
+            salt,
+            expectedHash,
+            N,
+            r,
+            p,
+        };
+    }
+    static verifySecret(secretValue, storedPassword, expectedPrefix) {
+        if (typeof secretValue !== "string") {
+            return false;
+        }
+        const parsedHash = this.parseHash(storedPassword, expectedPrefix);
+        if (!parsedHash) {
+            return false;
+        }
+        const derivedKey = crypto_1.default.scryptSync(secretValue, parsedHash.salt, parsedHash.expectedHash.length, {
+            N: parsedHash.N,
+            r: parsedHash.r,
+            p: parsedHash.p,
+            maxmem: 64 * 1024 * 1024,
+        });
+        return crypto_1.default.timingSafeEqual(derivedKey, parsedHash.expectedHash);
+    }
+    static hashPassword(plainPassword) {
+        return this.hashSecret(plainPassword, this.HASH_PREFIX);
+    }
+    static hashLegacyEncryptedPassword(legacyEncryptedPassword) {
+        return this.hashSecret(legacyEncryptedPassword, this.LEGACY_HASH_PREFIX);
+    }
+    static isPasswordHash(value) {
+        return this.hasPrefix(value, this.HASH_PREFIX);
+    }
+    static isLegacyPasswordHash(value) {
+        return this.hasPrefix(value, this.LEGACY_HASH_PREFIX);
+    }
+    static verifyPassword(plainPassword, storedPassword) {
+        return this.verifySecret(plainPassword, storedPassword, this.HASH_PREFIX);
+    }
+    static verifyLegacyEncryptedPassword(legacyEncryptedPassword, storedPassword) {
+        return this.verifySecret(legacyEncryptedPassword, storedPassword, this.LEGACY_HASH_PREFIX);
+    }
+}
+exports.PasswordUtilities = PasswordUtilities;
+PasswordUtilities.HASH_PREFIX = "scrypt";
+PasswordUtilities.LEGACY_HASH_PREFIX = "scrypt-legacy";
+PasswordUtilities.SCRYPT_N = 16384;
+PasswordUtilities.SCRYPT_R = 8;
+PasswordUtilities.SCRYPT_P = 1;
+PasswordUtilities.SALT_LENGTH = 16;
 /**
  * Utility class for managing database-related configurations and operations.
  */

package/dist/Utilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"Utilities.js","sourceRoot":"","sources":["../src/Utilities.ts"],"names":[],"mappings":";;;;;;AA0VA,gCAIG;AA5VH,oDAA4B;AAG5B,IAAY,UAIX;AAJD,WAAY,UAAU;IAClB,uCAAM,CAAA;IACN,iDAAW,CAAA;IACX,6CAAS,CAAA;AACb,CAAC,EAJW,UAAU,0BAAV,UAAU,QAIrB;AAED,MAAa,aAAa;IACtB;;;;;OAKG;IACH,MAAM,CAAC,gBAAgB,CAAC,GAAW,EAAE,WAAmB;QACpD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,aAAa,CAAC,KAAW,EAAE,SAAkB,KAAK;QACrD,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACrD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC;IAC7F,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,SAAS,CAAC,KAAW,EAAE,SAAkB,KAAK;QACjD,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACrD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7D,OAAO,MAAM;YACT,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC7C,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,YAAY,CAAC,KAAW;QAC3B,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACrD,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,gBAAgB;QACnB,MAAM,GAAG,GAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7D,OAAO,GAAG,GAAG,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,SAAS,CAAC,IAAY;QACzB,MAAM,KAAK,GAAa,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;CACJ;AAnFD,sCAmFC;AAGD,MAAa,aAAa;IACtB;;;;;OAKG;IACH,MAAM,CAAC,aAAa,CAAC,GAAa,EAAE,OAAe;QAC/C,OAAO,GAAG,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,GAAG;YACX,UAAU,EAAE,UAAU,CAAC,EAAE;YACzB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,gBAAgB,CAAC,GAAa,EAAE,KAAU,EAAE,MAAc,cAAc,EAAE,SAAiB,GAAG;QACjG,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YAC3B,QAAQ,EAAE,OAAO;YACjB,MAAM;YACN,UAAU,EAAE,UAAU,CAAC,KAAK;YAC5B,OAAO,EAAE,mBAAmB;YAC5B,KAAK,EAAE,GAAG,GAAG,KAAK,KAAK,EAAE;SAC5B,CAAC,CAAC;IACP,CAAC;IAGD,MAAM,CAAC,gBAAgB,CAAC,GAAa;QACjC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,UAAU,CAAC,KAAK;YAC5B,OAAO,EAAE,qBAAqB;SACjC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,CAAC,sBAAsB,CAAC,GAAa;QACvC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,UAAU,CAAC,KAAK;YAC5B,OAAO,EAAE,wBAAwB;SACpC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,CAAC,mBAAmB,CAAC,GAAa;QACpC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,QAAQ,EAAE,SAAS;YACnB,UAAU,EAAE,UAAU,CAAC,OAAO;YAC9B,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,6CAA6C;SACzD,CAAC,CAAA;IACN,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,gBAAgB,CAAC,GAAa,EAAE,OAAY;QAC/C,IAAI,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9C,MAAM,QAAQ,GAAG;gBACb,MAAM,EAAE;oBACJ,SAAS,EAAE,GAAG;oBACd,gBAAgB,EAAE,EAAE;iBACvB;gBACD,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,+BAA+B;aAC3C,CAAC;YACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,2BAA2B,KAAK,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;QAC9F,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,eAAe,CAAC,GAAa,EAAE,eAAoB,EAAE,KAAa;QACrE,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG;gBACb,MAAM,EAAE;oBACJ,SAAS,EAAE,GAAG;oBACd,gBAAgB,EAAE,EAAE;iBACvB;gBACD,GAAG,EAAE,EAAE;gBACP,EAAE,EAAE,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,EAAE;gBACvB,IAAI,EAAE,eAAe;gBACrB,KAAK,EAAE,KAAK;aACf,CAAC;YACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,oCAAoC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/F,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,oBAAoB,CAAC,QAAgB,EAAE,EAAE,MAAa;QACzD,IAAI,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;gBACnB,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAGM,MAAM,CAAC,sBAAsB,CAAC,GAAQ;QACzC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAQ,EAAE,GAAW,EAAE,EAAE;gBACrD,MAAM,YAAY,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;gBACrF,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC7B,OAAO,GAAG,CAAC;YACf,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,CAAC;QACD,OAAO,GAAG,CAAC;IACf,CAAC;CACJ;AAxID,sCAwIC;AAGD,MAAa,cAAc;IAEvB;;;;;;;;GAQD;IACQ,MAAM,CAAC,OAAO,CAAC,SAAiB,EAAE,GAAW,EAAE,iBAAiC,QAAQ;QAC3F,IAAI,CAAC;YACD,wDAAwD;YACxD,MAAM,MAAM,GAAG,gBAAM,CAAC,cAAc,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;YAEpF,mDAAmD;YACnD,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;gBAClC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;gBAChC,MAAM,CAAC,KAAK,EAAE;aACjB,CAAC,CAAC;YAEH,8CAA8C;YAC9C,OAAO,eAAe,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,yCAAyC;YACzC,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,OAAO,CAAC,aAAqB,EAAE,GAAW;QACpD,IAAI,CAAC;YACD,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,gBAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;YACxF,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAE/B,2BAA2B;YAC3B,IAAI,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC/D,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAElC,6BAA6B;YAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACxD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC;YAEtD,OAAO,OAAO,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;CACJ;AAzDD,wCAyDC;AAMD;;GAEG;AACH,MAAa,iBAAiB;IAC1B;;;;;;;;;;;;;;;;;;;;OAoBG;IACI,MAAM,CAAC,YAAY,CACtB,IAAY,EACZ,IAAY,EACZ,QAAgB,EAChB,QAAQ,GAAG,QAAQ,EACnB,QAAQ,GAAG,WAAW;QAEtB,OAAO;YACH,IAAI,EAAoB,qDAAqD;YAC7E,IAAI,EAAoB,+CAA+C;YACvE,IAAI,EAAE,QAAQ,EAAU,4CAA4C;YACpE,QAAQ,EAAgB,4CAA4C;YACpE,QAAQ,EAAgB,4CAA4C;YACpE,cAAc,EAAE,KAAK,EAAG,kFAAkF;YAC1G,IAAI,EAAE,SAAS,EAAS,4DAA4D;YACpF,QAAQ,EAAE,MAAM,EAAQ,6DAA6D;YACrF,uBAAuB,EAAE,IAAI,EAAE,wEAAwE;YACvG,UAAU,EAAE,IAAI,EAAQ,sEAAsE;SACjG,CAAC;IACN,CAAC;CACJ;AA1CD,8CA0CC;AAED,SAAgB,UAAU,CAAC,OAAe;IACtC,OAAO,UAAU,MAAW,EAAE,GAAY,EAAE,UAA+B;QACzE,OAAO,CAAC,IAAI,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { Response } from 'express';\nimport { Options } from \"es-node-firebird\";\nimport crypto from \"crypto\";\n\n\nexport enum StatusCode {\n    Ok = 0,\n    Warning = 1,\n    Error = 2,\n}\n\nexport class DateUtilities {\n    /**\n     * Pads a number with leading zeros to reach a specified length.\n     * @param num - The number to pad.\n     * @param totalLength - The total length of the resulting string.\n     * @returns The padded string.\n     */\n    static addStartingZeros(num: number, totalLength: number): string {\n        return String(num).padStart(totalLength, '0');\n    }\n\n    /**\n     * Formats a Date object as a Moncler-style string.\n     * @param dData - The date to format.\n     * @param bAddMs - Whether to include milliseconds.\n     * @returns The formatted date string.\n     */\n    static dateToMoncler(dData: Date, bAddMs: boolean = false): string {\n        const yy = dData.getFullYear();\n        const mm = this.addStartingZeros(dData.getMonth() + 1, 2);\n        const dd = this.addStartingZeros(dData.getDate(), 2);\n        const hh = this.addStartingZeros(dData.getHours(), 2);\n        const nn = this.addStartingZeros(dData.getMinutes(), 2);\n        const ss = this.addStartingZeros(dData.getSeconds(), 2);\n        const ms = this.addStartingZeros(dData.getMilliseconds(), 3);\n        return bAddMs ? `${yy}${mm}${dd}${hh}${nn}${ss}${ms}` : `${yy}${mm}${dd}${hh}${nn}${ss}`;\n    }\n\n    /**\n     * Formats a Date object as a SQL-style string.\n     * @param dData - The date to format.\n     * @param bAddMs - Whether to include milliseconds.\n     * @returns The formatted date string.\n     */\n    static dateToSql(dData: Date, bAddMs: boolean = false): string {\n        const yy = dData.getFullYear();\n        const mm = this.addStartingZeros(dData.getMonth() + 1, 2);\n        const dd = this.addStartingZeros(dData.getDate(), 2);\n        const hh = this.addStartingZeros(dData.getHours(), 2);\n        const nn = this.addStartingZeros(dData.getMinutes(), 2);\n        const ss = this.addStartingZeros(dData.getSeconds(), 2);\n        const ms = this.addStartingZeros(dData.getMilliseconds(), 3);\n        return bAddMs\n            ? `${yy}-${mm}-${dd} ${hh}:${nn}:${ss}.${ms}`\n            : `${yy}-${mm}-${dd} ${hh}:${nn}:${ss}`;\n    }\n\n    /**\n     * Formats a Date object as a simple string (dd-MM-yyyy).\n     * @param dData - The date to format.\n     * @returns The formatted date string.\n     */\n    static dateToSimple(dData: Date): string {\n        const yy = dData.getFullYear();\n        const mm = this.addStartingZeros(dData.getMonth() + 1, 2);\n        const dd = this.addStartingZeros(dData.getDate(), 2);\n        return `${dd}-${mm}-${yy}`;\n    }\n\n    /**\n     * Gets the current date and time as a formatted string.\n     * @returns The current date and time in the format dd.MM.yyyy HH:mm:ss.\n     */\n    static getNowDateString(): string {\n        const now: Date = new Date();\n        const day = now.getDate().toString().padStart(2, \"0\");\n        const month = (now.getMonth() + 1).toString().padStart(2, \"0\");\n        const year = now.getFullYear();\n        const hours = now.getHours().toString().padStart(2, \"0\");\n        const minutes = now.getMinutes().toString().padStart(2, \"0\");\n        const seconds = now.getSeconds().toString().padStart(2, \"0\");\n        return `${day}.${month}.${year} ${hours}:${minutes}:${seconds}`;\n    }\n\n    /**\n     * Parses a date string in the format dd/MM/yyyy into a Date object.\n     * @param date - The date string to parse.\n     * @returns A Date object.\n     */\n    static parseDate(date: string): Date {\n        const parts: string[] = date.split(\"/\");\n        return new Date(Number(parts[2]), Number(parts[1]) - 1, Number(parts[0]));\n    }\n}\n\n\nexport class RestUtilities {\n    /**\n     * Sends an OK message as a response.\n     * @param res - Express Response object.\n     * @param message - The success message.\n     * @returns The Response object.\n     */\n    static sendOKMessage(res: Response, message: string): Response {\n        return res.send({\n            severity: \"success\",\n            status: 200,\n            statusCode: StatusCode.Ok,\n            message,\n        });\n    }\n\n    /**\n     * Sends an error message as a response.\n     * @param res - Express Response object.\n     * @param error - The error to send.\n     * @param tag - Optional tag for additional context.\n     * @param status - HTTP status code (default: 500).\n     * @returns The Response object.\n     */\n    static sendErrorMessage(res: Response, error: any, tag: string = \"[BASE ERROR]\", status: number = 500): Response {\n        return res.status(status).send({\n            severity: \"error\",\n            status,\n            statusCode: StatusCode.Error,\n            message: \"An error occurred\",\n            error: `${tag}: ${error}`,\n        });\n    }\n\n\n    static sendUnauthorized(res: Response): Response {\n        return res.status(401).send({\n            severity: \"error\",\n            statusCode: StatusCode.Error,\n            message: \"Non sei autorizzato\",\n        });\n    }\n\n    static sendInvalidCredentials(res: Response): Response {\n        return res.status(401).send({\n            severity: \"error\",\n            statusCode: StatusCode.Error,\n            message: \"Credenziali non valide\"\n        });\n    }\n\n    static sendPasswordExpired(res: Response): Response {\n        return res.status(403).send({\n            severity: \"warning\",\n            statusCode: StatusCode.Warning,\n            code: \"PASSWORD_EXPIRED\",\n            message: \"Password scaduta. E' necessario aggiornarla\"\n        })\n    }\n\n    /**\n     * Sends a base response with a payload.\n     * @param res - Express Response object.\n     * @param payload - The payload to include in the response.\n     * @returns The Response object.\n     */\n    static sendBaseResponse(res: Response, payload: any): Response {\n        try {\n            payload = JSON.parse(JSON.stringify(payload));\n            const response = {\n                Status: {\n                    errorCode: \"0\",\n                    errorDescription: \"\",\n                },\n                Result: payload,\n                Message: \"Dati recuperati con successo.\",\n            };\n            return res.send(response);\n        } catch (error) {\n            return this.sendErrorMessage(res, `Error sending response: ${error}`, \"[UTILITIES]\", 500);\n        }\n    }\n\n    /**\n     * Sends an execution message as a response.\n     * @param res - Express Response object.\n     * @param executionObject - The execution data.\n     * @param title - The title of the response.\n     * @returns The Response object.\n     */\n    static sendExecMessage(res: Response, executionObject: any, title: string): Response {\n        try {\n            const response = {\n                Status: {\n                    errorCode: \"0\",\n                    errorDescription: \"\",\n                },\n                Sql: \"\",\n                ID: executionObject?.id,\n                data: executionObject,\n                Title: title,\n            };\n            return res.send(response);\n        } catch (error) {\n            return this.sendErrorMessage(res, `Error sending execution message: ${error}`, title, 500);\n        }\n    }\n\n    /**\n     * Prints a SQL query with parameters replaced.\n     * @param query - The SQL query.\n     * @param params - The parameters to replace.\n     * @returns The formatted query.\n     */\n    static printQueryWithParams(query: string = \"\", params: any[]): string {\n        try {\n            params.forEach(param => {\n                query = query.replace(\"?\", param);\n            });\n            return query;\n        } catch (error) {\n            throw error;\n        }\n    }\n\n\n    public static convertKeysToCamelCase(obj: any): any {\n        if (obj !== null && obj.constructor === Object) {\n            return Object.keys(obj).reduce((acc: any, key: string) => {\n                const camelCaseKey = key.toLowerCase().replace(/_([a-z])/g, g => g[1].toUpperCase());\n                acc[camelCaseKey] = obj[key];\n                return acc;\n            }, {});\n        }\n        return obj;\n    }\n}\n\n\nexport class CryptUtilities {\n\n    /**\n * Cifra un testo in chiaro usando l'algoritmo AES-128 in modalità ECB.\n * \n * @param plainText - Il testo in chiaro da cifrare.\n * @param key - La chiave di cifratura (16 byte per AES-128).\n * @param outputEncoding - Codifica del risultato cifrato (predefinito: \"base64\").\n * @returns Il testo cifrato codificato.\n * @throws Errore in caso di problemi durante la cifratura.\n */\n    public static encrypt(plainData: string, key: string, outputEncoding: BufferEncoding = \"base64\"): string {\n        try {\n            // Crea un oggetto Cipher usando AES-128 in modalità ECB\n            const cipher = crypto.createCipheriv(\"aes-128-ecb\", Buffer.from(key, \"utf8\"), null);\n\n            // Cifra il testo in chiaro e finalizza il processo\n            const encryptedBuffer = Buffer.concat([\n                cipher.update(plainData, \"utf8\"),\n                cipher.final(),\n            ]);\n\n            // Restituisce il risultato cifrato codificato\n            return encryptedBuffer.toString(outputEncoding);\n        } catch (error) {\n            // Gestisce eventuali errori di cifratura\n            throw new Error(`Errore durante la cifratura: ${error.message}`);\n        }\n    }\n\n    /**\n     * Decifra un testo cifrato usando l'algoritmo AES-128 in modalità ECB.\n     * \n     * @param encryptedData - Il testo cifrato da decifrare.\n     * @param key - La chiave di decifratura (16 byte per AES-128).\n     * @returns Il testo decifrato o null in caso di errore.\n     */\n    public static decrypt(encryptedData: string, key: string): string | null {\n        try {\n            // Crea un oggetto Decipher usando AES-128 in modalità ECB\n            const decipher = crypto.createDecipheriv(\"aes-128-ecb\", Buffer.from(key, \"utf8\"), null);\n            decipher.setAutoPadding(false);\n\n            // Decifra il testo cifrato\n            let decoded = decipher.update(encryptedData, \"base64\", \"utf8\");\n            decoded += decipher.final(\"utf8\");\n\n            // Rimuove il padding manuale\n            const lastChar = decoded.charCodeAt(decoded.length - 1);\n            decoded = decoded.slice(0, decoded.length - lastChar);\n\n            return decoded;\n        } catch (error) {\n            console.error(\"Errore durante la decifratura:\", error);\n            return null;\n        }\n    }\n}\n\n\n\n\n\n/**\n * Utility class for managing database-related configurations and operations.\n */\nexport class DatabaseUtilities {\n    /**\n     * Creates a configuration object for connecting to a Firebird database.\n     *\n     * @param {string} host - The hostname or IP address of the database server.\n     * @param {number} port - The port number on which the database server is running.\n     * @param {string} database - The path or alias of the database to connect to.\n     * @param {string} [username='SYSDBA'] - The username for authentication. Defaults to 'SYSDBA'.\n     * @param {string} [password='masterkey'] - The password for authentication. Defaults to 'masterkey'.\n     * @returns {Options} - The configuration object to use for establishing a Firebird database connection.\n     *\n     * @example\n     * ```typescript\n     * const options = DatabaseUtilities.createOption(\n     *   'localhost',\n     *   3050,\n     *   '/path/to/database.fdb',\n     *   'myUsername',\n     *   'myPassword'\n     * );\n     * ```\n     */\n    public static createOption(\n        host: string,\n        port: number,\n        database: string,\n        username = 'SYSDBA',\n        password = 'masterkey'\n    ): Options {\n        return {\n            host,                   // The hostname or IP address of the database server.\n            port,                   // The port number used by the database server.\n            user: username,         // The username for database authentication.\n            password,               // The password for database authentication.\n            database,               // The path or alias of the target database.\n            lowercase_keys: false,  // Determines if the keys in query results should be in lowercase. Default: false.\n            role: undefined,        // The role for the database connection. Default: undefined.\n            pageSize: 100000,       // The page size for database transactions. Default: 100,000.\n            retryConnectionInterval: 1000, // The interval (in ms) to retry a failed connection. Default: 1,000 ms.\n            blobAsText: true,       // Determines if BLOB fields should be treated as text. Default: true.\n        };\n    }\n}\n\nexport function Deprecated(message: string) {\n    return function (target: any, key?: string, descriptor?: PropertyDescriptor) {\n      console.warn(`[DEPRECATED] ${message}`);\n    };\n  }"]}
+{"version":3,"file":"Utilities.js","sourceRoot":"","sources":["../src/Utilities.ts"],"names":[],"mappings":";;;;;;AA2dA,gCAIG;AA7dH,oDAA4B;AAG5B,IAAY,UAIX;AAJD,WAAY,UAAU;IAClB,uCAAM,CAAA;IACN,iDAAW,CAAA;IACX,6CAAS,CAAA;AACb,CAAC,EAJW,UAAU,0BAAV,UAAU,QAIrB;AAED,MAAa,aAAa;IACtB;;;;;OAKG;IACH,MAAM,CAAC,gBAAgB,CAAC,GAAW,EAAE,WAAmB;QACpD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,aAAa,CAAC,KAAW,EAAE,SAAkB,KAAK;QACrD,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACrD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC;IAC7F,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,SAAS,CAAC,KAAW,EAAE,SAAkB,KAAK;QACjD,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACrD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7D,OAAO,MAAM;YACT,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC7C,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,YAAY,CAAC,KAAW;QAC3B,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACrD,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,gBAAgB;QACnB,MAAM,GAAG,GAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7D,OAAO,GAAG,GAAG,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,SAAS,CAAC,IAAY;QACzB,MAAM,KAAK,GAAa,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;CACJ;AAnFD,sCAmFC;AAGD,MAAa,aAAa;IACtB;;;;;OAKG;IACH,MAAM,CAAC,aAAa,CAAC,GAAa,EAAE,OAAe;QAC/C,OAAO,GAAG,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,GAAG;YACX,UAAU,EAAE,UAAU,CAAC,EAAE;YACzB,OAAO;SACV,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,gBAAgB,CAAC,GAAa,EAAE,KAAU,EAAE,MAAc,cAAc,EAAE,SAAiB,GAAG;QACjG,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YAC3B,QAAQ,EAAE,OAAO;YACjB,MAAM;YACN,UAAU,EAAE,UAAU,CAAC,KAAK;YAC5B,OAAO,EAAE,mBAAmB;YAC5B,KAAK,EAAE,GAAG,GAAG,KAAK,KAAK,EAAE;SAC5B,CAAC,CAAC;IACP,CAAC;IAGD,MAAM,CAAC,gBAAgB,CAAC,GAAa;QACjC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,UAAU,CAAC,KAAK;YAC5B,OAAO,EAAE,qBAAqB;SACjC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,CAAC,sBAAsB,CAAC,GAAa;QACvC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,UAAU,CAAC,KAAK;YAC5B,OAAO,EAAE,wBAAwB;SACpC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,CAAC,mBAAmB,CAAC,GAAa;QACpC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,QAAQ,EAAE,SAAS;YACnB,UAAU,EAAE,UAAU,CAAC,OAAO;YAC9B,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,6CAA6C;SACzD,CAAC,CAAA;IACN,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,gBAAgB,CAAC,GAAa,EAAE,OAAY;QAC/C,IAAI,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9C,MAAM,QAAQ,GAAG;gBACb,MAAM,EAAE;oBACJ,SAAS,EAAE,GAAG;oBACd,gBAAgB,EAAE,EAAE;iBACvB;gBACD,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,+BAA+B;aAC3C,CAAC;YACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,2BAA2B,KAAK,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;QAC9F,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,eAAe,CAAC,GAAa,EAAE,eAAoB,EAAE,KAAa;QACrE,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG;gBACb,MAAM,EAAE;oBACJ,SAAS,EAAE,GAAG;oBACd,gBAAgB,EAAE,EAAE;iBACvB;gBACD,GAAG,EAAE,EAAE;gBACP,EAAE,EAAE,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,EAAE;gBACvB,IAAI,EAAE,eAAe;gBACrB,KAAK,EAAE,KAAK;aACf,CAAC;YACF,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,oCAAoC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/F,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,oBAAoB,CAAC,QAAgB,EAAE,EAAE,MAAa;QACzD,IAAI,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;gBACnB,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAGM,MAAM,CAAC,sBAAsB,CAAC,GAAQ;QACzC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAQ,EAAE,GAAW,EAAE,EAAE;gBACrD,MAAM,YAAY,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;gBACrF,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC7B,OAAO,GAAG,CAAC;YACf,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,CAAC;QACD,OAAO,GAAG,CAAC;IACf,CAAC;CACJ;AAxID,sCAwIC;AAGD,MAAa,cAAc;IAEvB;;;;;;;;GAQD;IACQ,MAAM,CAAC,OAAO,CAAC,SAAiB,EAAE,GAAW,EAAE,iBAAiC,QAAQ;QAC3F,IAAI,CAAC;YACD,wDAAwD;YACxD,MAAM,MAAM,GAAG,gBAAM,CAAC,cAAc,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;YAEpF,mDAAmD;YACnD,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;gBAClC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;gBAChC,MAAM,CAAC,KAAK,EAAE;aACjB,CAAC,CAAC;YAEH,8CAA8C;YAC9C,OAAO,eAAe,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,yCAAyC;YACzC,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,OAAO,CAAC,aAAqB,EAAE,GAAW;QACpD,IAAI,CAAC;YACD,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,gBAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;YACxF,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAE/B,2BAA2B;YAC3B,IAAI,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC/D,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAElC,6BAA6B;YAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACxD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC;YAEtD,OAAO,OAAO,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;CACJ;AAzDD,wCAyDC;AAED,MAAa,iBAAiB;IAQlB,MAAM,CAAC,UAAU,CAAC,WAAmB,EAAE,MAAc;QACzD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,IAAI,GAAG,gBAAM,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,gBAAM,CAAC,UAAU,CAChC,WAAW,EACX,IAAI,EACJ,EAAE,EACF;YACI,CAAC,EAAE,IAAI,CAAC,QAAQ;YAChB,CAAC,EAAE,IAAI,CAAC,QAAQ;YAChB,CAAC,EAAE,IAAI,CAAC,QAAQ;YAChB,MAAM,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;SAC3B,CACJ,CAAC;QAEF,OAAO;YACH,MAAM;YACN,IAAI,CAAC,QAAQ;YACb,IAAI,CAAC,QAAQ;YACb,IAAI,CAAC,QAAQ;YACb,IAAI;YACJ,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;SAC7B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IAEO,MAAM,CAAC,SAAS,CAAC,KAAa,EAAE,MAAc;QAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;IACvE,CAAC;IAEO,MAAM,CAAC,SAAS,CACpB,cAAsB,EACtB,cAAsB;QAQtB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9E,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAEvB,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACjG,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACzD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO;YACH,IAAI;YACJ,YAAY;YACZ,CAAC;YACD,CAAC;YACD,CAAC;SACJ,CAAC;IACN,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,WAAmB,EAAE,cAAsB,EAAE,cAAsB;QAC3F,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,UAAU,GAAG,gBAAM,CAAC,UAAU,CAChC,WAAW,EACX,UAAU,CAAC,IAAI,EACf,UAAU,CAAC,YAAY,CAAC,MAAM,EAC9B;YACI,CAAC,EAAE,UAAU,CAAC,CAAC;YACf,CAAC,EAAE,UAAU,CAAC,CAAC;YACf,CAAC,EAAE,UAAU,CAAC,CAAC;YACf,MAAM,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;SAC3B,CACJ,CAAC;QAEF,OAAO,gBAAM,CAAC,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;IACvE,CAAC;IAEM,MAAM,CAAC,YAAY,CAAC,aAAqB;QAC5C,OAAO,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5D,CAAC;IAEM,MAAM,CAAC,2BAA2B,CAAC,uBAA+B;QACrE,OAAO,IAAI,CAAC,UAAU,CAAC,uBAAuB,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC7E,CAAC;IAEM,MAAM,CAAC,cAAc,CAAC,KAAa;QACtC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACnD,CAAC;IAEM,MAAM,CAAC,oBAAoB,CAAC,KAAa;QAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC1D,CAAC;IAEM,MAAM,CAAC,cAAc,CAAC,aAAqB,EAAE,cAAsB;QACtE,OAAO,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9E,CAAC;IAEM,MAAM,CAAC,6BAA6B,CACvC,uBAA+B,EAC/B,cAAsB;QAEtB,OAAO,IAAI,CAAC,YAAY,CAAC,uBAAuB,EAAE,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC/F,CAAC;;AA9HL,8CA+HC;AA9H2B,6BAAW,GAAG,QAAQ,CAAC;AACvB,oCAAkB,GAAG,eAAe,CAAC;AACrC,0BAAQ,GAAG,KAAK,CAAC;AACjB,0BAAQ,GAAG,CAAC,CAAC;AACb,0BAAQ,GAAG,CAAC,CAAC;AACb,6BAAW,GAAG,EAAE,CAAC;AA+H7C;;GAEG;AACH,MAAa,iBAAiB;IAC1B;;;;;;;;;;;;;;;;;;;;OAoBG;IACI,MAAM,CAAC,YAAY,CACtB,IAAY,EACZ,IAAY,EACZ,QAAgB,EAChB,QAAQ,GAAG,QAAQ,EACnB,QAAQ,GAAG,WAAW;QAEtB,OAAO;YACH,IAAI,EAAoB,qDAAqD;YAC7E,IAAI,EAAoB,+CAA+C;YACvE,IAAI,EAAE,QAAQ,EAAU,4CAA4C;YACpE,QAAQ,EAAgB,4CAA4C;YACpE,QAAQ,EAAgB,4CAA4C;YACpE,cAAc,EAAE,KAAK,EAAG,kFAAkF;YAC1G,IAAI,EAAE,SAAS,EAAS,4DAA4D;YACpF,QAAQ,EAAE,MAAM,EAAQ,6DAA6D;YACrF,uBAAuB,EAAE,IAAI,EAAE,wEAAwE;YACvG,UAAU,EAAE,IAAI,EAAQ,sEAAsE;SACjG,CAAC;IACN,CAAC;CACJ;AA1CD,8CA0CC;AAED,SAAgB,UAAU,CAAC,OAAe;IACtC,OAAO,UAAU,MAAW,EAAE,GAAY,EAAE,UAA+B;QACzE,OAAO,CAAC,IAAI,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { Response } from 'express';\r\nimport { Options } from \"es-node-firebird\";\r\nimport crypto from \"crypto\";\r\n\r\n\r\nexport enum StatusCode {\r\n    Ok = 0,\r\n    Warning = 1,\r\n    Error = 2,\r\n}\r\n\r\nexport class DateUtilities {\r\n    /**\r\n     * Pads a number with leading zeros to reach a specified length.\r\n     * @param num - The number to pad.\r\n     * @param totalLength - The total length of the resulting string.\r\n     * @returns The padded string.\r\n     */\r\n    static addStartingZeros(num: number, totalLength: number): string {\r\n        return String(num).padStart(totalLength, '0');\r\n    }\r\n\r\n    /**\r\n     * Formats a Date object as a Moncler-style string.\r\n     * @param dData - The date to format.\r\n     * @param bAddMs - Whether to include milliseconds.\r\n     * @returns The formatted date string.\r\n     */\r\n    static dateToMoncler(dData: Date, bAddMs: boolean = false): string {\r\n        const yy = dData.getFullYear();\r\n        const mm = this.addStartingZeros(dData.getMonth() + 1, 2);\r\n        const dd = this.addStartingZeros(dData.getDate(), 2);\r\n        const hh = this.addStartingZeros(dData.getHours(), 2);\r\n        const nn = this.addStartingZeros(dData.getMinutes(), 2);\r\n        const ss = this.addStartingZeros(dData.getSeconds(), 2);\r\n        const ms = this.addStartingZeros(dData.getMilliseconds(), 3);\r\n        return bAddMs ? `${yy}${mm}${dd}${hh}${nn}${ss}${ms}` : `${yy}${mm}${dd}${hh}${nn}${ss}`;\r\n    }\r\n\r\n    /**\r\n     * Formats a Date object as a SQL-style string.\r\n     * @param dData - The date to format.\r\n     * @param bAddMs - Whether to include milliseconds.\r\n     * @returns The formatted date string.\r\n     */\r\n    static dateToSql(dData: Date, bAddMs: boolean = false): string {\r\n        const yy = dData.getFullYear();\r\n        const mm = this.addStartingZeros(dData.getMonth() + 1, 2);\r\n        const dd = this.addStartingZeros(dData.getDate(), 2);\r\n        const hh = this.addStartingZeros(dData.getHours(), 2);\r\n        const nn = this.addStartingZeros(dData.getMinutes(), 2);\r\n        const ss = this.addStartingZeros(dData.getSeconds(), 2);\r\n        const ms = this.addStartingZeros(dData.getMilliseconds(), 3);\r\n        return bAddMs\r\n            ? `${yy}-${mm}-${dd} ${hh}:${nn}:${ss}.${ms}`\r\n            : `${yy}-${mm}-${dd} ${hh}:${nn}:${ss}`;\r\n    }\r\n\r\n    /**\r\n     * Formats a Date object as a simple string (dd-MM-yyyy).\r\n     * @param dData - The date to format.\r\n     * @returns The formatted date string.\r\n     */\r\n    static dateToSimple(dData: Date): string {\r\n        const yy = dData.getFullYear();\r\n        const mm = this.addStartingZeros(dData.getMonth() + 1, 2);\r\n        const dd = this.addStartingZeros(dData.getDate(), 2);\r\n        return `${dd}-${mm}-${yy}`;\r\n    }\r\n\r\n    /**\r\n     * Gets the current date and time as a formatted string.\r\n     * @returns The current date and time in the format dd.MM.yyyy HH:mm:ss.\r\n     */\r\n    static getNowDateString(): string {\r\n        const now: Date = new Date();\r\n        const day = now.getDate().toString().padStart(2, \"0\");\r\n        const month = (now.getMonth() + 1).toString().padStart(2, \"0\");\r\n        const year = now.getFullYear();\r\n        const hours = now.getHours().toString().padStart(2, \"0\");\r\n        const minutes = now.getMinutes().toString().padStart(2, \"0\");\r\n        const seconds = now.getSeconds().toString().padStart(2, \"0\");\r\n        return `${day}.${month}.${year} ${hours}:${minutes}:${seconds}`;\r\n    }\r\n\r\n    /**\r\n     * Parses a date string in the format dd/MM/yyyy into a Date object.\r\n     * @param date - The date string to parse.\r\n     * @returns A Date object.\r\n     */\r\n    static parseDate(date: string): Date {\r\n        const parts: string[] = date.split(\"/\");\r\n        return new Date(Number(parts[2]), Number(parts[1]) - 1, Number(parts[0]));\r\n    }\r\n}\r\n\r\n\r\nexport class RestUtilities {\r\n    /**\r\n     * Sends an OK message as a response.\r\n     * @param res - Express Response object.\r\n     * @param message - The success message.\r\n     * @returns The Response object.\r\n     */\r\n    static sendOKMessage(res: Response, message: string): Response {\r\n        return res.send({\r\n            severity: \"success\",\r\n            status: 200,\r\n            statusCode: StatusCode.Ok,\r\n            message,\r\n        });\r\n    }\r\n\r\n    /**\r\n     * Sends an error message as a response.\r\n     * @param res - Express Response object.\r\n     * @param error - The error to send.\r\n     * @param tag - Optional tag for additional context.\r\n     * @param status - HTTP status code (default: 500).\r\n     * @returns The Response object.\r\n     */\r\n    static sendErrorMessage(res: Response, error: any, tag: string = \"[BASE ERROR]\", status: number = 500): Response {\r\n        return res.status(status).send({\r\n            severity: \"error\",\r\n            status,\r\n            statusCode: StatusCode.Error,\r\n            message: \"An error occurred\",\r\n            error: `${tag}: ${error}`,\r\n        });\r\n    }\r\n\r\n\r\n    static sendUnauthorized(res: Response): Response {\r\n        return res.status(401).send({\r\n            severity: \"error\",\r\n            statusCode: StatusCode.Error,\r\n            message: \"Non sei autorizzato\",\r\n        });\r\n    }\r\n\r\n    static sendInvalidCredentials(res: Response): Response {\r\n        return res.status(401).send({\r\n            severity: \"error\",\r\n            statusCode: StatusCode.Error,\r\n            message: \"Credenziali non valide\"\r\n        });\r\n    }\r\n\r\n    static sendPasswordExpired(res: Response): Response {\r\n        return res.status(403).send({\r\n            severity: \"warning\",\r\n            statusCode: StatusCode.Warning,\r\n            code: \"PASSWORD_EXPIRED\",\r\n            message: \"Password scaduta. E' necessario aggiornarla\"\r\n        })\r\n    }\r\n\r\n    /**\r\n     * Sends a base response with a payload.\r\n     * @param res - Express Response object.\r\n     * @param payload - The payload to include in the response.\r\n     * @returns The Response object.\r\n     */\r\n    static sendBaseResponse(res: Response, payload: any): Response {\r\n        try {\r\n            payload = JSON.parse(JSON.stringify(payload));\r\n            const response = {\r\n                Status: {\r\n                    errorCode: \"0\",\r\n                    errorDescription: \"\",\r\n                },\r\n                Result: payload,\r\n                Message: \"Dati recuperati con successo.\",\r\n            };\r\n            return res.send(response);\r\n        } catch (error) {\r\n            return this.sendErrorMessage(res, `Error sending response: ${error}`, \"[UTILITIES]\", 500);\r\n        }\r\n    }\r\n\r\n    /**\r\n     * Sends an execution message as a response.\r\n     * @param res - Express Response object.\r\n     * @param executionObject - The execution data.\r\n     * @param title - The title of the response.\r\n     * @returns The Response object.\r\n     */\r\n    static sendExecMessage(res: Response, executionObject: any, title: string): Response {\r\n        try {\r\n            const response = {\r\n                Status: {\r\n                    errorCode: \"0\",\r\n                    errorDescription: \"\",\r\n                },\r\n                Sql: \"\",\r\n                ID: executionObject?.id,\r\n                data: executionObject,\r\n                Title: title,\r\n            };\r\n            return res.send(response);\r\n        } catch (error) {\r\n            return this.sendErrorMessage(res, `Error sending execution message: ${error}`, title, 500);\r\n        }\r\n    }\r\n\r\n    /**\r\n     * Prints a SQL query with parameters replaced.\r\n     * @param query - The SQL query.\r\n     * @param params - The parameters to replace.\r\n     * @returns The formatted query.\r\n     */\r\n    static printQueryWithParams(query: string = \"\", params: any[]): string {\r\n        try {\r\n            params.forEach(param => {\r\n                query = query.replace(\"?\", param);\r\n            });\r\n            return query;\r\n        } catch (error) {\r\n            throw error;\r\n        }\r\n    }\r\n\r\n\r\n    public static convertKeysToCamelCase(obj: any): any {\r\n        if (obj !== null && obj.constructor === Object) {\r\n            return Object.keys(obj).reduce((acc: any, key: string) => {\r\n                const camelCaseKey = key.toLowerCase().replace(/_([a-z])/g, g => g[1].toUpperCase());\r\n                acc[camelCaseKey] = obj[key];\r\n                return acc;\r\n            }, {});\r\n        }\r\n        return obj;\r\n    }\r\n}\r\n\r\n\r\nexport class CryptUtilities {\r\n\r\n    /**\r\n * Cifra un testo in chiaro usando l'algoritmo AES-128 in modalità ECB.\r\n * \r\n * @param plainText - Il testo in chiaro da cifrare.\r\n * @param key - La chiave di cifratura (16 byte per AES-128).\r\n * @param outputEncoding - Codifica del risultato cifrato (predefinito: \"base64\").\r\n * @returns Il testo cifrato codificato.\r\n * @throws Errore in caso di problemi durante la cifratura.\r\n */\r\n    public static encrypt(plainData: string, key: string, outputEncoding: BufferEncoding = \"base64\"): string {\r\n        try {\r\n            // Crea un oggetto Cipher usando AES-128 in modalità ECB\r\n            const cipher = crypto.createCipheriv(\"aes-128-ecb\", Buffer.from(key, \"utf8\"), null);\r\n\r\n            // Cifra il testo in chiaro e finalizza il processo\r\n            const encryptedBuffer = Buffer.concat([\r\n                cipher.update(plainData, \"utf8\"),\r\n                cipher.final(),\r\n            ]);\r\n\r\n            // Restituisce il risultato cifrato codificato\r\n            return encryptedBuffer.toString(outputEncoding);\r\n        } catch (error) {\r\n            // Gestisce eventuali errori di cifratura\r\n            throw new Error(`Errore durante la cifratura: ${error.message}`);\r\n        }\r\n    }\r\n\r\n    /**\r\n     * Decifra un testo cifrato usando l'algoritmo AES-128 in modalità ECB.\r\n     * \r\n     * @param encryptedData - Il testo cifrato da decifrare.\r\n     * @param key - La chiave di decifratura (16 byte per AES-128).\r\n     * @returns Il testo decifrato o null in caso di errore.\r\n     */\r\n    public static decrypt(encryptedData: string, key: string): string | null {\r\n        try {\r\n            // Crea un oggetto Decipher usando AES-128 in modalità ECB\r\n            const decipher = crypto.createDecipheriv(\"aes-128-ecb\", Buffer.from(key, \"utf8\"), null);\r\n            decipher.setAutoPadding(false);\r\n\r\n            // Decifra il testo cifrato\r\n            let decoded = decipher.update(encryptedData, \"base64\", \"utf8\");\r\n            decoded += decipher.final(\"utf8\");\r\n\r\n            // Rimuove il padding manuale\r\n            const lastChar = decoded.charCodeAt(decoded.length - 1);\r\n            decoded = decoded.slice(0, decoded.length - lastChar);\r\n\r\n            return decoded;\r\n        } catch (error) {\r\n            console.error(\"Errore durante la decifratura:\", error);\r\n            return null;\r\n        }\r\n    }\r\n}\r\n\r\nexport class PasswordUtilities {\r\n    private static readonly HASH_PREFIX = \"scrypt\";\r\n    private static readonly LEGACY_HASH_PREFIX = \"scrypt-legacy\";\r\n    private static readonly SCRYPT_N = 16384;\r\n    private static readonly SCRYPT_R = 8;\r\n    private static readonly SCRYPT_P = 1;\r\n    private static readonly SALT_LENGTH = 16;\r\n\r\n    private static hashSecret(secretValue: string, prefix: string): string {\r\n        if (typeof secretValue !== \"string\" || secretValue.length === 0) {\r\n            throw new Error(\"Il valore da proteggere non puo essere vuoto.\");\r\n        }\r\n        const salt = crypto.randomBytes(this.SALT_LENGTH).toString(\"hex\");\r\n        const derivedKey = crypto.scryptSync(\r\n            secretValue,\r\n            salt,\r\n            64,\r\n            {\r\n                N: this.SCRYPT_N,\r\n                r: this.SCRYPT_R,\r\n                p: this.SCRYPT_P,\r\n                maxmem: 64 * 1024 * 1024,\r\n            },\r\n        );\r\n\r\n        return [\r\n            prefix,\r\n            this.SCRYPT_N,\r\n            this.SCRYPT_R,\r\n            this.SCRYPT_P,\r\n            salt,\r\n            derivedKey.toString(\"hex\"),\r\n        ].join(\"$\");\r\n    }\r\n\r\n    private static hasPrefix(value: string, prefix: string): boolean {\r\n        return typeof value === \"string\" && value.startsWith(`${prefix}$`);\r\n    }\r\n\r\n    private static parseHash(\r\n        storedPassword: string,\r\n        expectedPrefix: string\r\n    ): {\r\n        salt: string;\r\n        expectedHash: Buffer;\r\n        N: number;\r\n        r: number;\r\n        p: number;\r\n    } | null {\r\n        if (!this.hasPrefix(storedPassword, expectedPrefix)) {\r\n            return null;\r\n        }\r\n\r\n        const [, rawN, rawR, rawP, salt, expectedHashHex] = storedPassword.split(\"$\");\r\n        const N = Number(rawN);\r\n        const r = Number(rawR);\r\n        const p = Number(rawP);\r\n\r\n        if (!salt || !expectedHashHex || !Number.isFinite(N) || !Number.isFinite(r) || !Number.isFinite(p)) {\r\n            return null;\r\n        }\r\n\r\n        const expectedHash = Buffer.from(expectedHashHex, \"hex\");\r\n        if (expectedHash.length === 0) {\r\n            return null;\r\n        }\r\n\r\n        return {\r\n            salt,\r\n            expectedHash,\r\n            N,\r\n            r,\r\n            p,\r\n        };\r\n    }\r\n\r\n    private static verifySecret(secretValue: string, storedPassword: string, expectedPrefix: string): boolean {\r\n        if (typeof secretValue !== \"string\") {\r\n            return false;\r\n        }\r\n\r\n        const parsedHash = this.parseHash(storedPassword, expectedPrefix);\r\n        if (!parsedHash) {\r\n            return false;\r\n        }\r\n\r\n        const derivedKey = crypto.scryptSync(\r\n            secretValue,\r\n            parsedHash.salt,\r\n            parsedHash.expectedHash.length,\r\n            {\r\n                N: parsedHash.N,\r\n                r: parsedHash.r,\r\n                p: parsedHash.p,\r\n                maxmem: 64 * 1024 * 1024,\r\n            },\r\n        );\r\n\r\n        return crypto.timingSafeEqual(derivedKey, parsedHash.expectedHash);\r\n    }\r\n\r\n    public static hashPassword(plainPassword: string): string {\r\n        return this.hashSecret(plainPassword, this.HASH_PREFIX);\r\n    }\r\n\r\n    public static hashLegacyEncryptedPassword(legacyEncryptedPassword: string): string {\r\n        return this.hashSecret(legacyEncryptedPassword, this.LEGACY_HASH_PREFIX);\r\n    }\r\n\r\n    public static isPasswordHash(value: string): boolean {\r\n        return this.hasPrefix(value, this.HASH_PREFIX);\r\n    }\r\n\r\n    public static isLegacyPasswordHash(value: string): boolean {\r\n        return this.hasPrefix(value, this.LEGACY_HASH_PREFIX);\r\n    }\r\n\r\n    public static verifyPassword(plainPassword: string, storedPassword: string): boolean {\r\n        return this.verifySecret(plainPassword, storedPassword, this.HASH_PREFIX);\r\n    }\r\n\r\n    public static verifyLegacyEncryptedPassword(\r\n        legacyEncryptedPassword: string,\r\n        storedPassword: string\r\n    ): boolean {\r\n        return this.verifySecret(legacyEncryptedPassword, storedPassword, this.LEGACY_HASH_PREFIX);\r\n    }\r\n}\r\n\r\n\r\n\r\n\r\n\r\n/**\r\n * Utility class for managing database-related configurations and operations.\r\n */\r\nexport class DatabaseUtilities {\r\n    /**\r\n     * Creates a configuration object for connecting to a Firebird database.\r\n     *\r\n     * @param {string} host - The hostname or IP address of the database server.\r\n     * @param {number} port - The port number on which the database server is running.\r\n     * @param {string} database - The path or alias of the database to connect to.\r\n     * @param {string} [username='SYSDBA'] - The username for authentication. Defaults to 'SYSDBA'.\r\n     * @param {string} [password='masterkey'] - The password for authentication. Defaults to 'masterkey'.\r\n     * @returns {Options} - The configuration object to use for establishing a Firebird database connection.\r\n     *\r\n     * @example\r\n     * ```typescript\r\n     * const options = DatabaseUtilities.createOption(\r\n     *   'localhost',\r\n     *   3050,\r\n     *   '/path/to/database.fdb',\r\n     *   'myUsername',\r\n     *   'myPassword'\r\n     * );\r\n     * ```\r\n     */\r\n    public static createOption(\r\n        host: string,\r\n        port: number,\r\n        database: string,\r\n        username = 'SYSDBA',\r\n        password = 'masterkey'\r\n    ): Options {\r\n        return {\r\n            host,                   // The hostname or IP address of the database server.\r\n            port,                   // The port number used by the database server.\r\n            user: username,         // The username for database authentication.\r\n            password,               // The password for database authentication.\r\n            database,               // The path or alias of the target database.\r\n            lowercase_keys: false,  // Determines if the keys in query results should be in lowercase. Default: false.\r\n            role: undefined,        // The role for the database connection. Default: undefined.\r\n            pageSize: 100000,       // The page size for database transactions. Default: 100,000.\r\n            retryConnectionInterval: 1000, // The interval (in ms) to retry a failed connection. Default: 1,000 ms.\r\n            blobAsText: true,       // Determines if BLOB fields should be treated as text. Default: true.\r\n        };\r\n    }\r\n}\r\n\r\nexport function Deprecated(message: string) {\r\n    return function (target: any, key?: string, descriptor?: PropertyDescriptor) {\r\n      console.warn(`[DEPRECATED] ${message}`);\r\n    };\r\n  }\r\n"]}

package/dist/accessi-module/AccessiModule.d.ts

@@ -31,6 +31,18 @@ export interface ExtensionFieldsOptions {
     tableFields: string[];
     tableJoinFieldName: string;
 }
+export interface PublicAuthRateLimitRuleOptions {
+    windowMs: number;
+    maxAttempts: number;
+}
+export interface PublicAuthRateLimitOptions {
+    enabled?: boolean;
+    login?: PublicAuthRateLimitRuleOptions;
+    register?: PublicAuthRateLimitRuleOptions;
+    passwordResetEmail?: PublicAuthRateLimitRuleOptions;
+    passwordResetConfirm?: PublicAuthRateLimitRuleOptions;
+    getUserByToken?: PublicAuthRateLimitRuleOptions;
+}
 export interface AccessiOptions {
     databaseOptions: Options;
     /**
@@ -47,9 +59,12 @@ export interface AccessiOptions {
     encryptionKey: string;
     mockDemoUser: boolean;
     passwordExpiration?: boolean;
+    passwordExpirationDays?: number;
+    legacyPasswordMigrationOnStartup?: boolean;
     autoUpdateDatabase?: boolean;
     jwtOptions: JwtOptions;
     emailOptions: EmailOptions;
+    publicAuthRateLimit?: PublicAuthRateLimitOptions;
     extensionFieldsOptions?: ExtensionFieldsOptions[];
 }
 export declare class AccessiModule {

package/dist/accessi-module/AccessiModule.js.map

@@ -1 +1 @@
-{"version":3,"file":"AccessiModule.js","sourceRoot":"","sources":["../../src/accessi-module/AccessiModule.ts"],"names":[],"mappings":";;;;;;;;;;AAOA,2CAA+D;AAC/D,oEAAiE;AACjE,uEAAoE;AACpE,sFAAmF;AACnF,oEAAiE;AACjE,mEAAgE;AAChE,iEAA8D;AAC9D,6EAA0E;AAC1E,iEAA8D;AAC9D,0EAAuE;AACvE,qEAAkE;AAClE,iFAA8E;AAC9E,4FAAyF;AACzF,qDAAoD;AACpD,kEAAsE;AACtE,sFAAmF;AAiE5E,IAAM,aAAa,qBAAnB,MAAM,aAAa;IACxB,MAAM,CAAC,OAAO,CAAC,OAAuB;QACpC,OAAO;YACL,MAAM,EAAE,eAAa;YACrB,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,iBAAiB;oBAC1B,QAAQ,EAAE,OAAO;iBAClB;gBACD,yBAAW;gBACX,yBAAW;gBACX,2BAAY;gBACZ,qCAAiB;gBACjB,6BAAa;gBACb,yCAAmB;gBACnB,6BAAc;gBACd,wCAAsB;gBACtB,+CAAsB;aACvB;YACD,OAAO,EAAE;gBACP,iBAAiB;gBACjB,yBAAW;gBACX,yBAAW;gBACX,2BAAY;gBACZ,qCAAiB;gBACjB,6BAAa;gBACb,yCAAmB;gBACnB,6BAAc;gBACd,wCAAsB;aACvB;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAhCY,sCAAa;wBAAb,aAAa;IAbzB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,WAAW,EAAE;YACX,iCAAe;YACf,+BAAc;YACd,2CAAoB;YACpB,+BAAc;YACd,mCAAgB;YAChB,+CAAsB;SACvB;QACD,SAAS,EAAE,CAAC,yBAAW,EAAE,yBAAW,EAAE,2BAAY,EAAE,qCAAiB,EAAE,6BAAa,EAAE,yCAAmB,EAAE,6BAAc,EAAE,wCAAsB,EAAE,+CAAsB,CAAC;QAC1K,OAAO,EAAE,CAAC,yBAAW,EAAE,yBAAW,EAAE,2BAAY,EAAE,qCAAiB,EAAE,6BAAa,EAAE,yCAAmB,EAAE,6BAAc,EAAE,wCAAsB,CAAC;KACjJ,CAAC;GACW,aAAa,CAgCzB","sourcesContent":["/**\n * Modulo che gestisce le operazioni di accesso degli utenti, incluse le rotte, il controller e il modello.\n *\n * @module AccessiModule\n * @author mttdev382\n */\nimport { Options } from 'es-node-firebird';\nimport { DynamicModule, Global, Module } from '@nestjs/common';\nimport { AuthService } from './Services/AuthService/AuthService';\nimport { EmailService } from './Services/EmailService/EmailService';\nimport { PermissionService } from './Services/PermissionService/PermissionService';\nimport { UserService } from './Services/UserService/UserService';\nimport { EmailController } from './Controllers/EmailController';\nimport { AuthController } from './Controllers/AuthController';\nimport { PermissionController } from './Controllers/PermissionController';\nimport { UserController } from './Controllers/UserController';\nimport { FiltriService } from './Services/FiltriService/FiltriService';\nimport { FiltriController } from './Controllers/FiltriController';\nimport { ConfiguratorController } from './Controllers/ConfiguratorController';\nimport { ConfiguratorService } from './Services/ConfiguratorService/ConfiguratorService';\nimport { JwtSimpleGuard } from './jwt/jwt.strategy';\nimport { AuthenticateGenService } from './middleware/authenticateGen';\nimport { AccessiDatabaseUpdater } from './database-updates/AccessiDatabaseUpdater';\n\nexport interface JwtOptions {\n  secret: string;\n  expiresIn: string;\n}\n\nexport interface EmailOptions {\n  host: string;\n  port: number;\n  secure: boolean;\n  requireTLS : boolean;\n  tls: {\n    rejectUnauthorized: boolean,\n  }\n  from: string;\n  auth: {\n    user: string;\n    pass: string;\n  };\n}\n\nexport interface ExtensionFieldsOptions {\n  databaseOptions: Options;\n  objectKey: string;\n  tableName: string;\n  tableFields: string[];\n  tableJoinFieldName: string;\n}\n\nexport interface AccessiOptions {\n  databaseOptions: Options;\n  /**\n   * Basepath del sito es: 'http://www.il-mio-sito.it/nome-progetto(se c'è)'\n   */\n  confirmationEmailUrl: string;\n  /**\n   * Percorso della pagina di reset personalizzata es. http://localhost:4200/#/admin/reset-password\n   * N.B si sostituisce al confirmationMailURl\n   */\n  customResetPage?: string;\n  confirmationEmailReturnUrl: string;\n  confirmationEmailPrefix?: string;\n  encryptionKey: string;\n  mockDemoUser: boolean;\n  passwordExpiration?: boolean;\n  autoUpdateDatabase?: boolean;\n  jwtOptions: JwtOptions;\n  emailOptions: EmailOptions;\n  extensionFieldsOptions?: ExtensionFieldsOptions[];\n}\n\n@Global()\n@Module({\n  controllers: [\n    EmailController,\n    AuthController,\n    PermissionController,\n    UserController,\n    FiltriController,\n    ConfiguratorController\n  ],\n  providers: [AuthService, UserService, EmailService, PermissionService, FiltriService, ConfiguratorService, JwtSimpleGuard, AuthenticateGenService, AccessiDatabaseUpdater],\n  exports: [AuthService, UserService, EmailService, PermissionService, FiltriService, ConfiguratorService, JwtSimpleGuard, AuthenticateGenService],\n})\nexport class AccessiModule {\n  static forRoot(options: AccessiOptions): DynamicModule {\n    return {\n      module: AccessiModule,\n      providers: [\n        {\n          provide: 'ACCESSI_OPTIONS',\n          useValue: options,\n        },\n        AuthService,\n        UserService,\n        EmailService,\n        PermissionService,\n        FiltriService,\n        ConfiguratorService,\n        JwtSimpleGuard,\n        AuthenticateGenService,\n        AccessiDatabaseUpdater\n      ],\n      exports: [\n        'ACCESSI_OPTIONS',\n        AuthService,\n        UserService,\n        EmailService,\n        PermissionService,\n        FiltriService,\n        ConfiguratorService,\n        JwtSimpleGuard,\n        AuthenticateGenService\n      ],\n    };\n  }\n}\n"]}
+{"version":3,"file":"AccessiModule.js","sourceRoot":"","sources":["../../src/accessi-module/AccessiModule.ts"],"names":[],"mappings":";;;;;;;;;;AAOA,2CAA+D;AAC/D,oEAAiE;AACjE,uEAAoE;AACpE,sFAAmF;AACnF,oEAAiE;AACjE,mEAAgE;AAChE,iEAA8D;AAC9D,6EAA0E;AAC1E,iEAA8D;AAC9D,0EAAuE;AACvE,qEAAkE;AAClE,iFAA8E;AAC9E,4FAAyF;AACzF,qDAAoD;AACpD,kEAAsE;AACtE,sFAAmF;AAkF5E,IAAM,aAAa,qBAAnB,MAAM,aAAa;IACxB,MAAM,CAAC,OAAO,CAAC,OAAuB;QACpC,OAAO;YACL,MAAM,EAAE,eAAa;YACrB,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,iBAAiB;oBAC1B,QAAQ,EAAE,OAAO;iBAClB;gBACD,yBAAW;gBACX,yBAAW;gBACX,2BAAY;gBACZ,qCAAiB;gBACjB,6BAAa;gBACb,yCAAmB;gBACnB,6BAAc;gBACd,wCAAsB;gBACtB,+CAAsB;aACvB;YACD,OAAO,EAAE;gBACP,iBAAiB;gBACjB,yBAAW;gBACX,yBAAW;gBACX,2BAAY;gBACZ,qCAAiB;gBACjB,6BAAa;gBACb,yCAAmB;gBACnB,6BAAc;gBACd,wCAAsB;aACvB;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAhCY,sCAAa;wBAAb,aAAa;IAbzB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,WAAW,EAAE;YACX,iCAAe;YACf,+BAAc;YACd,2CAAoB;YACpB,+BAAc;YACd,mCAAgB;YAChB,+CAAsB;SACvB;QACD,SAAS,EAAE,CAAC,yBAAW,EAAE,yBAAW,EAAE,2BAAY,EAAE,qCAAiB,EAAE,6BAAa,EAAE,yCAAmB,EAAE,6BAAc,EAAE,wCAAsB,EAAE,+CAAsB,CAAC;QAC1K,OAAO,EAAE,CAAC,yBAAW,EAAE,yBAAW,EAAE,2BAAY,EAAE,qCAAiB,EAAE,6BAAa,EAAE,yCAAmB,EAAE,6BAAc,EAAE,wCAAsB,CAAC;KACjJ,CAAC;GACW,aAAa,CAgCzB","sourcesContent":["/**\r\n * Modulo che gestisce le operazioni di accesso degli utenti, incluse le rotte, il controller e il modello.\r\n *\r\n * @module AccessiModule\r\n * @author mttdev382\r\n */\r\nimport { Options } from 'es-node-firebird';\r\nimport { DynamicModule, Global, Module } from '@nestjs/common';\r\nimport { AuthService } from './Services/AuthService/AuthService';\r\nimport { EmailService } from './Services/EmailService/EmailService';\r\nimport { PermissionService } from './Services/PermissionService/PermissionService';\r\nimport { UserService } from './Services/UserService/UserService';\r\nimport { EmailController } from './Controllers/EmailController';\r\nimport { AuthController } from './Controllers/AuthController';\r\nimport { PermissionController } from './Controllers/PermissionController';\r\nimport { UserController } from './Controllers/UserController';\r\nimport { FiltriService } from './Services/FiltriService/FiltriService';\r\nimport { FiltriController } from './Controllers/FiltriController';\r\nimport { ConfiguratorController } from './Controllers/ConfiguratorController';\r\nimport { ConfiguratorService } from './Services/ConfiguratorService/ConfiguratorService';\r\nimport { JwtSimpleGuard } from './jwt/jwt.strategy';\r\nimport { AuthenticateGenService } from './middleware/authenticateGen';\r\nimport { AccessiDatabaseUpdater } from './database-updates/AccessiDatabaseUpdater';\r\n\r\nexport interface JwtOptions {\r\n  secret: string;\r\n  expiresIn: string;\r\n}\r\n\r\nexport interface EmailOptions {\r\n  host: string;\r\n  port: number;\r\n  secure: boolean;\r\n  requireTLS : boolean;\r\n  tls: {\r\n    rejectUnauthorized: boolean,\r\n  }\r\n  from: string;\r\n  auth: {\r\n    user: string;\r\n    pass: string;\r\n  };\r\n}\r\n\r\nexport interface ExtensionFieldsOptions {\r\n  databaseOptions: Options;\r\n  objectKey: string;\r\n  tableName: string;\r\n  tableFields: string[];\r\n  tableJoinFieldName: string;\r\n}\r\n\r\nexport interface PublicAuthRateLimitRuleOptions {\r\n  windowMs: number;\r\n  maxAttempts: number;\r\n}\r\n\r\nexport interface PublicAuthRateLimitOptions {\r\n  enabled?: boolean;\r\n  login?: PublicAuthRateLimitRuleOptions;\r\n  register?: PublicAuthRateLimitRuleOptions;\r\n  passwordResetEmail?: PublicAuthRateLimitRuleOptions;\r\n  passwordResetConfirm?: PublicAuthRateLimitRuleOptions;\r\n  getUserByToken?: PublicAuthRateLimitRuleOptions;\r\n}\r\n\r\nexport interface AccessiOptions {\r\n  databaseOptions: Options;\r\n  /**\r\n   * Basepath del sito es: 'http://www.il-mio-sito.it/nome-progetto(se c'è)'\r\n   */\r\n  confirmationEmailUrl: string;\r\n  /**\r\n   * Percorso della pagina di reset personalizzata es. http://localhost:4200/#/admin/reset-password\r\n   * N.B si sostituisce al confirmationMailURl\r\n   */\r\n  customResetPage?: string;\r\n  confirmationEmailReturnUrl: string;\r\n  confirmationEmailPrefix?: string;\r\n  encryptionKey: string;\r\n  mockDemoUser: boolean;\r\n  passwordExpiration?: boolean;\n  passwordExpirationDays?: number;\n  legacyPasswordMigrationOnStartup?: boolean;\n  autoUpdateDatabase?: boolean;\n  jwtOptions: JwtOptions;\r\n  emailOptions: EmailOptions;\r\n  publicAuthRateLimit?: PublicAuthRateLimitOptions;\r\n  extensionFieldsOptions?: ExtensionFieldsOptions[];\r\n}\r\n\r\n@Global()\r\n@Module({\r\n  controllers: [\r\n    EmailController,\r\n    AuthController,\r\n    PermissionController,\r\n    UserController,\r\n    FiltriController,\r\n    ConfiguratorController\r\n  ],\r\n  providers: [AuthService, UserService, EmailService, PermissionService, FiltriService, ConfiguratorService, JwtSimpleGuard, AuthenticateGenService, AccessiDatabaseUpdater],\r\n  exports: [AuthService, UserService, EmailService, PermissionService, FiltriService, ConfiguratorService, JwtSimpleGuard, AuthenticateGenService],\r\n})\r\nexport class AccessiModule {\r\n  static forRoot(options: AccessiOptions): DynamicModule {\r\n    return {\r\n      module: AccessiModule,\r\n      providers: [\r\n        {\r\n          provide: 'ACCESSI_OPTIONS',\r\n          useValue: options,\r\n        },\r\n        AuthService,\r\n        UserService,\r\n        EmailService,\r\n        PermissionService,\r\n        FiltriService,\r\n        ConfiguratorService,\r\n        JwtSimpleGuard,\r\n        AuthenticateGenService,\r\n        AccessiDatabaseUpdater\r\n      ],\r\n      exports: [\r\n        'ACCESSI_OPTIONS',\r\n        AuthService,\r\n        UserService,\r\n        EmailService,\r\n        PermissionService,\r\n        FiltriService,\r\n        ConfiguratorService,\r\n        JwtSimpleGuard,\r\n        AuthenticateGenService\r\n      ],\r\n    };\r\n  }\r\n}\r\n"]}

package/dist/accessi-module/Controllers/AuthController.d.ts

@@ -1,4 +1,4 @@
-import { Response } from 'express';
+import { Request, Response } from 'express';
 import { AccessiOptions } from '../AccessiModule';
 import { AuthService } from '../Services/AuthService/AuthService';
 import { LoginRequest } from '../Dtos';
@@ -8,7 +8,7 @@ export declare class AuthController {
     private readonly options;
     logger: Logger;
     constructor(authService: AuthService, options: AccessiOptions);
-    resetPassword(res: Response, token: string, newPassword: string): Promise<Response<any, Record<string, any>>>;
-    getUserByToken(token: string, res: Response): Promise<Response<any, Record<string, any>>>;
-    login(loginRequest: LoginRequest, res: Response): Promise<Response<any, Record<string, any>>>;
+    resetPassword(request: Request, res: Response, token: string, newPassword: string): Promise<Response<any, Record<string, any>>>;
+    getUserByToken(request: Request, token: string, res: Response): Promise<Response<any, Record<string, any>>>;
+    login(request: Request, loginRequest: LoginRequest, res: Response): Promise<Response<any, Record<string, any>>>;
 }

package/dist/accessi-module/Controllers/AuthController.js

@@ -63,41 +63,53 @@ const Utilities_1 = require("../../Utilities");
 const AuthService_1 = require("../Services/AuthService/AuthService");
 const Dtos_1 = require("../Dtos");
 const Logger_1 = require("../../Logger");
+const publicAuthRateLimit_1 = require("../security/publicAuthRateLimit");
 let AuthController = AuthController_1 = class AuthController {
     constructor(authService, options) {
         this.authService = authService;
         this.options = options;
         this.logger = new Logger_1.Logger(AuthController_1.name);
     }
-    resetPassword(res, token, newPassword) {
+    resetPassword(request, res, token, newPassword) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
+                const rateLimitDecision = (0, publicAuthRateLimit_1.checkPublicAuthRateLimit)(this.options, 'passwordResetConfirm', request);
+                if (!rateLimitDecision.allowed) {
+                    return (0, publicAuthRateLimit_1.sendPublicAuthRateLimitExceeded)(res, rateLimitDecision.retryAfterSeconds);
+                }
                 yield this.authService.confirmResetPassword(token, newPassword);
                 return Utilities_1.RestUtilities.sendOKMessage(res, 'Password aggiornata con successo!');
             }
             catch (error) {
-                return Utilities_1.RestUtilities.sendErrorMessage(res, error, AuthController_1.name);
+                return Utilities_1.RestUtilities.sendErrorMessage(res, error, AuthController_1.name, common_1.HttpStatus.BAD_REQUEST);
             }
         });
     }
-    getUserByToken(token, res) {
+    getUserByToken(request, token, res) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
-                if (!token)
-                    return Utilities_1.RestUtilities.sendErrorMessage(res, 'Token non fornito', AuthController_1.name);
-                const decoded = jwt.verify(token, this.options.jwtOptions.secret);
-                if (!decoded)
-                    return Utilities_1.RestUtilities.sendUnauthorized(res);
-                return Utilities_1.RestUtilities.sendBaseResponse(res, { userData: decoded });
+                const rateLimitDecision = (0, publicAuthRateLimit_1.checkPublicAuthRateLimit)(this.options, 'getUserByToken', request);
+                if (!rateLimitDecision.allowed) {
+                    return (0, publicAuthRateLimit_1.sendPublicAuthRateLimitExceeded)(res, rateLimitDecision.retryAfterSeconds);
+                }
+                if (!token) {
+                    return Utilities_1.RestUtilities.sendErrorMessage(res, 'Token non fornito', AuthController_1.name, common_1.HttpStatus.BAD_REQUEST);
+                }
+                const authenticatedPayload = yield this.authService.getAuthenticatedTokenPayload(token);
+                return Utilities_1.RestUtilities.sendBaseResponse(res, { userData: authenticatedPayload });
             }
             catch (error) {
-                return Utilities_1.RestUtilities.sendErrorMessage(res, error, AuthController_1.name);
+                return Utilities_1.RestUtilities.sendErrorMessage(res, error, AuthController_1.name, common_1.HttpStatus.UNAUTHORIZED);
             }
         });
     }
-    login(loginRequest, res) {
+    login(request, loginRequest, res) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
+                const rateLimitDecision = (0, publicAuthRateLimit_1.checkPublicAuthRateLimit)(this.options, 'login', request, [loginRequest === null || loginRequest === void 0 ? void 0 : loginRequest.email]);
+                if (!rateLimitDecision.allowed) {
+                    return (0, publicAuthRateLimit_1.sendPublicAuthRateLimitExceeded)(res, rateLimitDecision.retryAfterSeconds);
+                }
                 const userData = yield this.authService.login(loginRequest);
                 if (!userData) {
                     return Utilities_1.RestUtilities.sendInvalidCredentials(res);
@@ -134,11 +146,12 @@ __decorate([
     (0, swagger_1.ApiResponse)({ status: 200, description: 'Password aggiornata con successo' }),
     (0, swagger_1.ApiResponse)({ status: 400, description: 'Errore nella richiesta o token non valido' }),
     (0, common_1.Post)('confirm-reset-password/:token'),
-    __param(0, (0, common_1.Res)()),
-    __param(1, (0, common_1.Param)('token')),
-    __param(2, (0, common_1.Body)("newPassword")),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __param(2, (0, common_1.Param)('token')),
+    __param(3, (0, common_1.Body)("newPassword")),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, String, String]),
+    __metadata("design:paramtypes", [Object, Object, String, String]),
     __metadata("design:returntype", Promise)
 ], AuthController.prototype, "resetPassword", null);
 __decorate([
@@ -147,10 +160,11 @@ __decorate([
     (0, swagger_1.ApiResponse)({ status: 200, description: 'Informazioni utente recuperate con successo' }),
     (0, swagger_1.ApiResponse)({ status: 401, description: 'Token non valido o scaduto' }),
     (0, common_1.Post)('get-user-by-token'),
-    __param(0, (0, common_1.Body)('token')),
-    __param(1, (0, common_1.Res)()),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Body)('token')),
+    __param(2, (0, common_1.Res)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:paramtypes", [Object, String, Object]),
     __metadata("design:returntype", Promise)
 ], AuthController.prototype, "getUserByToken", null);
 __decorate([
@@ -184,10 +198,11 @@ __decorate([
         }
     }),
     (0, common_1.Post)('login'),
-    __param(0, (0, common_1.Body)()),
-    __param(1, (0, common_1.Res)()),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Res)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Dtos_1.LoginRequest, Object]),
+    __metadata("design:paramtypes", [Object, Dtos_1.LoginRequest, Object]),
     __metadata("design:returntype", Promise)
 ], AuthController.prototype, "login", null);
 exports.AuthController = AuthController = AuthController_1 = __decorate([

package/dist/accessi-module/Controllers/AuthController.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/AuthController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA4E;AAC5E,6CAAwF;AAExF,kDAAoC;AACpC,+CAAgD;AAEhD,qEAAkE;AAClE,kCAAsD;AACtD,yCAAsC;AAI/B,IAAM,cAAc,sBAApB,MAAM,cAAc;IAGzB,YACmB,WAAwB,EACd,OAAwC;QADlD,gBAAW,GAAX,WAAW,CAAa;QACG,YAAO,GAAP,OAAO,CAAgB;QAHrE,WAAM,GAAW,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAI7C,CAAC;IAQC,aAAa,CAAQ,GAAa,EAAkB,KAAa,EAAuB,WAAmB;;YAC/G,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;gBAChE,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAc,CAAC,IAAI,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;KAAA;IAOK,cAAc,CAAgB,KAAa,EAAS,GAAa;;YACrE,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK;oBAAE,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,mBAAmB,EAAE,gBAAc,CAAC,IAAI,CAAC,CAAC;gBACjG,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBAClE,IAAI,CAAC,OAAO;oBAAE,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACzD,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACpE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAc,CAAC,IAAI,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;KAAA;IAgCK,KAAK,CAAS,YAA0B,EAAS,GAAa;;YAClE,IAAI,CAAC;gBAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,yBAAa,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;gBACnD,CAAC;gBAED,4BAA4B;gBAC5B,MAAM,SAAS,GAAG;oBAChB,MAAM,EAAE,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,MAAM;iBACzB,CAAA;gBAED,QAAQ,CAAC,KAAK,GAAG;oBACf,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS;oBAC5C,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE;wBACzD,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAgB;qBACpD,CAAC;oBACF,IAAI,EAAE,QAAQ;iBACf,CAAC;gBAEF,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAEf,IAAI,KAAK,CAAC,OAAO,KAAK,kBAAkB,EAAE,CAAC;oBACzC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAA;oBAClE,OAAO,yBAAa,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAA;gBAC/C,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;gBACpD,OAAO,yBAAa,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;YACnD,CAAC;QAEH,CAAC;KAAA;CACF,CAAA;AAvGY,wCAAc;AAcnB;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;IAC3F,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,mCAAmC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7F,IAAA,iBAAO,EAAC,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE,EAAE,EAAE,EAAE,CAAC;IACpH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;IAC7E,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;IACtF,IAAA,aAAI,EAAC,+BAA+B,CAAC;IACjB,WAAA,IAAA,YAAG,GAAE,CAAA;IAAiB,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;IAAiB,WAAA,IAAA,aAAI,EAAC,aAAa,CAAC,CAAA;;;;mDAO5F;AAOK;IALL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;IACzG,IAAA,iBAAO,EAAC,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC;IACnG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,6CAA6C,EAAE,CAAC;IACxF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;IACvE,IAAA,aAAI,EAAC,mBAAmB,CAAC;IACJ,WAAA,IAAA,aAAI,EAAC,OAAO,CAAC,CAAA;IAAiB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;oDASxD;AAgCK;IA9BL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0BAA0B;QACnC,WAAW,EAAE,2HAA2H;QACxI,WAAW,EAAE,OAAO;KACrB,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,mBAAY,EAAE,CAAC;IAC/B,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,+BAA+B;QAC5C,IAAI,EAAE,oBAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,wBAAwB;KACtC,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,8CAA8C;QAC3D,MAAM,EAAE;YACN,OAAO,EAAE;gBACP,OAAO,EAAE;oBACP,QAAQ,EAAE,SAAS;oBACnB,UAAU,EAAE,CAAC,EAAE,oCAAoC;oBACnD,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,6CAA6C;iBACvD;aACF;SACF;KACF,CAAC;IACD,IAAA,aAAI,EAAC,OAAO,CAAC;IACD,WAAA,IAAA,aAAI,GAAE,CAAA;IAA8B,WAAA,IAAA,YAAG,GAAE,CAAA;;qCAApB,mBAAY;;2CAiC7C;yBAtGU,cAAc;IAF1B,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,mBAAU,EAAC,cAAc,CAAC;IAMtB,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;qCADI,yBAAW;GAJhC,cAAc,CAuG1B","sourcesContent":["import { Body, Controller, Inject, Param, Post, Res } from '@nestjs/common';\nimport { ApiOperation, ApiTags, ApiResponse, ApiParam, ApiBody } from '@nestjs/swagger';\nimport { Response } from 'express';\nimport * as jwt from 'jsonwebtoken';\nimport { RestUtilities } from '../../Utilities';\nimport { AccessiOptions } from '../AccessiModule';\nimport { AuthService } from '../Services/AuthService/AuthService';\nimport { LoginRequest, LoginResponse } from '../Dtos';\nimport { Logger } from '../../Logger';\n\n@ApiTags('Auth')\n@Controller('accessi/auth')\nexport class AuthController {\n\n  logger: Logger = new Logger(AuthController.name);\n  constructor(\n    private readonly authService: AuthService,\n    @Inject('ACCESSI_OPTIONS') private readonly options: AccessiOptions\n  ) { }\n\n  @ApiOperation({ summary: 'Conferma il reset della password', operationId: \"resetPassword\" })\n  @ApiParam({ name: 'token', description: 'Token per il reset della password', required: true })\n  @ApiBody({ schema: { properties: { newPassword: { type: 'string', description: 'Nuova password da impostare' } } } })\n  @ApiResponse({ status: 200, description: 'Password aggiornata con successo' })\n  @ApiResponse({ status: 400, description: 'Errore nella richiesta o token non valido' })\n  @Post('confirm-reset-password/:token')\n  async resetPassword(@Res() res: Response, @Param('token') token: string, @Body(\"newPassword\") newPassword: string) {\n    try {\n      await this.authService.confirmResetPassword(token, newPassword);\n      return RestUtilities.sendOKMessage(res, 'Password aggiornata con successo!');\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, AuthController.name);\n    }\n  }\n\n  @ApiOperation({ summary: 'Recupera le informazioni utente dal token JWT', operationId: \"getUserByToken\" })\n  @ApiBody({ schema: { properties: { token: { type: 'string', description: 'JWT dell\\'utente' } } } })\n  @ApiResponse({ status: 200, description: 'Informazioni utente recuperate con successo' })\n  @ApiResponse({ status: 401, description: 'Token non valido o scaduto' })\n  @Post('get-user-by-token')\n  async getUserByToken(@Body('token') token: string, @Res() res: Response) {\n    try {\n      if (!token) return RestUtilities.sendErrorMessage(res, 'Token non fornito', AuthController.name);\n      const decoded = jwt.verify(token, this.options.jwtOptions.secret);\n      if (!decoded) return RestUtilities.sendUnauthorized(res);\n      return RestUtilities.sendBaseResponse(res, { userData: decoded });\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, AuthController.name);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Effettua il login utente',\n    description: 'Autentica l\\'utente con email e password. Restituisce un token JWT e i dati dell\\'utente se le credenziali sono corrette.',\n    operationId: 'login',\n  })\n  @ApiBody({ type: LoginRequest })\n  @ApiResponse({\n    status: 200,\n    description: 'Login effettuato con successo',\n    type: LoginResponse,\n  })\n  @ApiResponse({\n    status: 401,\n    description: 'Credenziali non valide',\n  })\n  @ApiResponse({\n    status: 403,\n    description: \"Password scaduta, è necessatio aggiornarla. \",\n    schema: {\n      example: {\n        message: {\n          severity: 'warning',\n          statusCode: 2, // o il valore di StatusCode.Warning\n          code: 'PASSWORD_EXPIRED',\n          message: 'Password scaduta. È necessario aggiornarla.',\n        }\n      }\n    }\n  })\n  @Post('login')\n  async login(@Body() loginRequest: LoginRequest, @Res() res: Response) {\n    try {\n\n      const userData = await this.authService.login(loginRequest);\n      if (!userData) {\n        return RestUtilities.sendInvalidCredentials(res);\n      }\n\n      // Generazione del token JWT\n      const tokenData = {\n        utente: userData?.utente,\n      }\n\n      userData.token = {\n        expiresIn: this.options.jwtOptions.expiresIn,\n        value: jwt.sign(tokenData, this.options.jwtOptions.secret, {\n          expiresIn: this.options.jwtOptions.expiresIn as any,\n        }),\n        type: 'Bearer',\n      };\n\n      return RestUtilities.sendBaseResponse(res, userData);\n    } catch (error) {\n\n      if (error.message === 'PASSWORD_EXPIRED') {\n        this.logger.warning('Password scaduta, cambiare password ', error)\n        return RestUtilities.sendPasswordExpired(res)\n      }\n\n      this.logger.error('Errore durante il login', error);\n      return RestUtilities.sendInvalidCredentials(res);\n    }\n    \n  }\n}\n\n"]}
+{"version":3,"file":"AuthController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/AuthController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6F;AAC7F,6CAAwF;AAExF,kDAAoC;AACpC,+CAAgD;AAEhD,qEAAkE;AAClE,kCAAsD;AACtD,yCAAsC;AACtC,yEAGyC;AAIlC,IAAM,cAAc,sBAApB,MAAM,cAAc;IAGzB,YACmB,WAAwB,EACd,OAAwC;QADlD,gBAAW,GAAX,WAAW,CAAa;QACG,YAAO,GAAP,OAAO,CAAgB;QAHrE,WAAM,GAAW,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAI7C,CAAC;IAQC,aAAa,CACV,OAAgB,EAChB,GAAa,EACJ,KAAa,EACR,WAAmB;;YAExC,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,8CAAwB,EAChD,IAAI,CAAC,OAAO,EACZ,sBAAsB,EACtB,OAAO,CACR,CAAC;gBACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;oBAC/B,OAAO,IAAA,qDAA+B,EAAC,GAAG,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;gBACnF,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;gBAChE,OAAO,yBAAa,CAAC,aAAa,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAc,CAAC,IAAI,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;KAAA;IAOK,cAAc,CACX,OAAgB,EACR,KAAa,EACrB,GAAa;;YAEpB,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,8CAAwB,EAChD,IAAI,CAAC,OAAO,EACZ,gBAAgB,EAChB,OAAO,CACR,CAAC;gBACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;oBAC/B,OAAO,IAAA,qDAA+B,EAAC,GAAG,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;gBACnF,CAAC;gBAED,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO,yBAAa,CAAC,gBAAgB,CACnC,GAAG,EACH,mBAAmB,EACnB,gBAAc,CAAC,IAAI,EACnB,mBAAU,CAAC,WAAW,CACvB,CAAC;gBACJ,CAAC;gBAED,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC;gBACxF,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACjF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAc,CAAC,IAAI,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;KAAA;IAgCK,KAAK,CAAQ,OAAgB,EAAU,YAA0B,EAAS,GAAa;;YAC3F,IAAI,CAAC;gBACH,MAAM,iBAAiB,GAAG,IAAA,8CAAwB,EAChD,IAAI,CAAC,OAAO,EACZ,OAAO,EACP,OAAO,EACP,CAAC,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,KAAK,CAAC,CACtB,CAAC;gBACF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;oBAC/B,OAAO,IAAA,qDAA+B,EAAC,GAAG,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;gBACnF,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,yBAAa,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;gBACnD,CAAC;gBAED,4BAA4B;gBAC5B,MAAM,SAAS,GAAG;oBAChB,MAAM,EAAE,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,MAAM;iBACzB,CAAA;gBAED,QAAQ,CAAC,KAAK,GAAG;oBACf,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS;oBAC5C,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE;wBACzD,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAgB;qBACpD,CAAC;oBACF,IAAI,EAAE,QAAQ;iBACf,CAAC;gBAEF,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAEf,IAAI,KAAK,CAAC,OAAO,KAAK,kBAAkB,EAAE,CAAC;oBACzC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAA;oBAClE,OAAO,yBAAa,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAA;gBAC/C,CAAC;gBAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;gBACpD,OAAO,yBAAa,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;YACnD,CAAC;QAEH,CAAC;KAAA;CACF,CAAA;AAlJY,wCAAc;AAcnB;IANL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;IAC3F,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,mCAAmC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7F,IAAA,iBAAO,EAAC,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE,EAAE,EAAE,EAAE,CAAC;IACpH,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;IAC7E,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;IACtF,IAAA,aAAI,EAAC,+BAA+B,CAAC;IAEnC,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;IACd,WAAA,IAAA,aAAI,EAAC,aAAa,CAAC,CAAA;;;;mDAiBrB;AAOK;IALL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;IACzG,IAAA,iBAAO,EAAC,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC;IACnG,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,6CAA6C,EAAE,CAAC;IACxF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;IACvE,IAAA,aAAI,EAAC,mBAAmB,CAAC;IAEvB,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,EAAC,OAAO,CAAC,CAAA;IACb,WAAA,IAAA,YAAG,GAAE,CAAA;;;;oDA0BP;AAgCK;IA9BL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0BAA0B;QACnC,WAAW,EAAE,2HAA2H;QACxI,WAAW,EAAE,OAAO;KACrB,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,mBAAY,EAAE,CAAC;IAC/B,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,+BAA+B;QAC5C,IAAI,EAAE,oBAAa;KACpB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,wBAAwB;KACtC,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,8CAA8C;QAC3D,MAAM,EAAE;YACN,OAAO,EAAE;gBACP,OAAO,EAAE;oBACP,QAAQ,EAAE,SAAS;oBACnB,UAAU,EAAE,CAAC,EAAE,oCAAoC;oBACnD,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,6CAA6C;iBACvD;aACF;SACF;KACF,CAAC;IACD,IAAA,aAAI,EAAC,OAAO,CAAC;IACD,WAAA,IAAA,YAAG,GAAE,CAAA;IAAoB,WAAA,IAAA,aAAI,GAAE,CAAA;IAA8B,WAAA,IAAA,YAAG,GAAE,CAAA;;6CAApB,mBAAY;;2CA0CtE;yBAjJU,cAAc;IAF1B,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,mBAAU,EAAC,cAAc,CAAC;IAMtB,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;qCADI,yBAAW;GAJhC,cAAc,CAkJ1B","sourcesContent":["import { Body, Controller, HttpStatus, Inject, Param, Post, Req, Res } from '@nestjs/common';\r\nimport { ApiOperation, ApiTags, ApiResponse, ApiParam, ApiBody } from '@nestjs/swagger';\r\nimport { Request, Response } from 'express';\r\nimport * as jwt from 'jsonwebtoken';\r\nimport { RestUtilities } from '../../Utilities';\r\nimport { AccessiOptions } from '../AccessiModule';\r\nimport { AuthService } from '../Services/AuthService/AuthService';\r\nimport { LoginRequest, LoginResponse } from '../Dtos';\r\nimport { Logger } from '../../Logger';\r\nimport {\r\n  checkPublicAuthRateLimit,\r\n  sendPublicAuthRateLimitExceeded,\r\n} from '../security/publicAuthRateLimit';\r\n\r\n@ApiTags('Auth')\r\n@Controller('accessi/auth')\r\nexport class AuthController {\r\n\r\n  logger: Logger = new Logger(AuthController.name);\r\n  constructor(\r\n    private readonly authService: AuthService,\r\n    @Inject('ACCESSI_OPTIONS') private readonly options: AccessiOptions\r\n  ) { }\r\n\r\n  @ApiOperation({ summary: 'Conferma il reset della password', operationId: \"resetPassword\" })\r\n  @ApiParam({ name: 'token', description: 'Token per il reset della password', required: true })\r\n  @ApiBody({ schema: { properties: { newPassword: { type: 'string', description: 'Nuova password da impostare' } } } })\r\n  @ApiResponse({ status: 200, description: 'Password aggiornata con successo' })\r\n  @ApiResponse({ status: 400, description: 'Errore nella richiesta o token non valido' })\r\n  @Post('confirm-reset-password/:token')\r\n  async resetPassword(\r\n    @Req() request: Request,\r\n    @Res() res: Response,\r\n    @Param('token') token: string,\r\n    @Body(\"newPassword\") newPassword: string,\r\n  ) {\r\n    try {\r\n      const rateLimitDecision = checkPublicAuthRateLimit(\r\n        this.options,\r\n        'passwordResetConfirm',\r\n        request,\r\n      );\r\n      if (!rateLimitDecision.allowed) {\r\n        return sendPublicAuthRateLimitExceeded(res, rateLimitDecision.retryAfterSeconds);\r\n      }\r\n\r\n      await this.authService.confirmResetPassword(token, newPassword);\r\n      return RestUtilities.sendOKMessage(res, 'Password aggiornata con successo!');\r\n    } catch (error) {\r\n      return RestUtilities.sendErrorMessage(res, error, AuthController.name, HttpStatus.BAD_REQUEST);\r\n    }\r\n  }\r\n\r\n  @ApiOperation({ summary: 'Recupera le informazioni utente dal token JWT', operationId: \"getUserByToken\" })\r\n  @ApiBody({ schema: { properties: { token: { type: 'string', description: 'JWT dell\\'utente' } } } })\r\n  @ApiResponse({ status: 200, description: 'Informazioni utente recuperate con successo' })\r\n  @ApiResponse({ status: 401, description: 'Token non valido o scaduto' })\r\n  @Post('get-user-by-token')\r\n  async getUserByToken(\r\n    @Req() request: Request,\r\n    @Body('token') token: string,\r\n    @Res() res: Response,\r\n  ) {\r\n    try {\r\n      const rateLimitDecision = checkPublicAuthRateLimit(\r\n        this.options,\r\n        'getUserByToken',\r\n        request,\r\n      );\r\n      if (!rateLimitDecision.allowed) {\r\n        return sendPublicAuthRateLimitExceeded(res, rateLimitDecision.retryAfterSeconds);\r\n      }\r\n\r\n      if (!token) {\r\n        return RestUtilities.sendErrorMessage(\r\n          res,\r\n          'Token non fornito',\r\n          AuthController.name,\r\n          HttpStatus.BAD_REQUEST,\r\n        );\r\n      }\r\n\r\n      const authenticatedPayload = await this.authService.getAuthenticatedTokenPayload(token);\r\n      return RestUtilities.sendBaseResponse(res, { userData: authenticatedPayload });\r\n    } catch (error) {\r\n      return RestUtilities.sendErrorMessage(res, error, AuthController.name, HttpStatus.UNAUTHORIZED);\r\n    }\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Effettua il login utente',\r\n    description: 'Autentica l\\'utente con email e password. Restituisce un token JWT e i dati dell\\'utente se le credenziali sono corrette.',\r\n    operationId: 'login',\r\n  })\r\n  @ApiBody({ type: LoginRequest })\r\n  @ApiResponse({\r\n    status: 200,\r\n    description: 'Login effettuato con successo',\r\n    type: LoginResponse,\r\n  })\r\n  @ApiResponse({\r\n    status: 401,\r\n    description: 'Credenziali non valide',\r\n  })\r\n  @ApiResponse({\r\n    status: 403,\r\n    description: \"Password scaduta, è necessatio aggiornarla. \",\r\n    schema: {\r\n      example: {\r\n        message: {\r\n          severity: 'warning',\r\n          statusCode: 2, // o il valore di StatusCode.Warning\r\n          code: 'PASSWORD_EXPIRED',\r\n          message: 'Password scaduta. È necessario aggiornarla.',\r\n        }\r\n      }\r\n    }\r\n  })\r\n  @Post('login')\r\n  async login(@Req() request: Request, @Body() loginRequest: LoginRequest, @Res() res: Response) {\r\n    try {\r\n      const rateLimitDecision = checkPublicAuthRateLimit(\r\n        this.options,\r\n        'login',\r\n        request,\r\n        [loginRequest?.email],\r\n      );\r\n      if (!rateLimitDecision.allowed) {\r\n        return sendPublicAuthRateLimitExceeded(res, rateLimitDecision.retryAfterSeconds);\r\n      }\r\n\r\n      const userData = await this.authService.login(loginRequest);\r\n      if (!userData) {\r\n        return RestUtilities.sendInvalidCredentials(res);\r\n      }\r\n\r\n      // Generazione del token JWT\r\n      const tokenData = {\r\n        utente: userData?.utente,\r\n      }\r\n\r\n      userData.token = {\r\n        expiresIn: this.options.jwtOptions.expiresIn,\r\n        value: jwt.sign(tokenData, this.options.jwtOptions.secret, {\r\n          expiresIn: this.options.jwtOptions.expiresIn as any,\r\n        }),\r\n        type: 'Bearer',\r\n      };\r\n\r\n      return RestUtilities.sendBaseResponse(res, userData);\r\n    } catch (error) {\r\n\r\n      if (error.message === 'PASSWORD_EXPIRED') {\r\n        this.logger.warning('Password scaduta, cambiare password ', error)\r\n        return RestUtilities.sendPasswordExpired(res)\r\n      }\r\n\r\n      this.logger.error('Errore durante il login', error);\r\n      return RestUtilities.sendInvalidCredentials(res);\r\n    }\r\n    \r\n  }\r\n}\r\n\r\n"]}

package/dist/accessi-module/Controllers/ConfiguratorController.js.map

@@ -1 +1 @@
-{"version":3,"file":"ConfiguratorController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/ConfiguratorController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6CAOyB;AAEzB,+CAAgD;AAEhD,kCAAqD;AACrD,6FAA0F;AAC1F,qEAAkE;AAClE,sDAAqD;AAM9C,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IACjC,YAC8C,OAAuB,EAC3D,WAAwB,EACxB,mBAAwC;QAFJ,YAAO,GAAP,OAAO,CAAgB;QAC3D,gBAAW,GAAX,WAAW,CAAa;QACxB,wBAAmB,GAAnB,mBAAmB,CAAqB;IAC/C,CAAC;IAkBE,cAAc,CACG,UAAkB,EAC/B,IAAgC,EACjC,GAAY,EACZ,GAAa;;;YAEpB,IAAI,CAAC;gBACH,IAAI,CAAC,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACvE,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO,MAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAE7F,MAAM,IAAI,GAAI,GAAW,aAAX,GAAG,uBAAH,GAAG,CAAU,IAAI,CAAC;gBAChC,MAAM,YAAY,GAAG,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,0CAAE,YAAY,CAAC;gBAChD,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,OAAO,yBAAa,CAAC,gBAAgB,CACnC,GAAG,EACH,oCAAoC,EACpC,wBAAsB,CAAC,IAAI,EAC3B,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAED,MAAM,YAAY,GAChB,CAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,0CAAE,qBAAqB;oBACnC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC7D,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,OAAO,yBAAa,CAAC,gBAAgB,CACnC,GAAG,EACH,8CAA8C,EAC9C,wBAAsB,CAAC,IAAI,EAC3B,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAED,MAAM,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBAExE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;gBAC3D,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,WAAW,UAAU,YAAY,MAAM,gBAAgB,CACxD,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,wBAAsB,CAAC,IAAI,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;KAAA;IAkBK,eAAe,CACI,YAAoB,EACnC,IAAgC,EACjC,GAAY,EACZ,GAAa;;;YAEpB,IAAI,CAAC;gBACH,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAC3E,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO,MAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAE7F,MAAM,IAAI,GAAI,GAAW,aAAX,GAAG,uBAAH,GAAG,CAAU,IAAI,CAAC;gBAChC,MAAM,YAAY,GAAG,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,0CAAE,YAAY,CAAC;gBAChD,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,OAAO,yBAAa,CAAC,gBAAgB,CACnC,GAAG,EACH,oCAAoC,EACpC,wBAAsB,CAAC,IAAI,EAC3B,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAED,MAAM,YAAY,GAChB,CAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,0CAAE,qBAAqB;oBACnC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC7D,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,OAAO,yBAAa,CAAC,gBAAgB,CACnC,GAAG,EACH,qDAAqD,EACrD,wBAAsB,CAAC,IAAI,EAC3B,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAED,MAAM,IAAI,CAAC,mBAAmB,CAAC,eAAe,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBAE3E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;gBAC3D,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,aAAa,YAAY,YAAY,MAAM,gBAAgB,CAC5D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,wBAAsB,CAAC,IAAI,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AAhIY,wDAAsB;AAuB3B;IAhBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,gBAAgB;KAC9B,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,8CAA8C;QAC3D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,QAAQ;KAClB,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,iCAA0B,EAAE,CAAC;IAC7C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;IACnF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;IACnF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iDAAiD,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;IACtE,IAAA,cAAK,EAAC,2BAA2B,CAAC;IAEhC,WAAA,IAAA,cAAK,EAAC,YAAY,CAAC,CAAA;IACnB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;;6CAFQ,iCAA0B;;4DAyCzC;AAkBK;IAhBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,qDAAqD;QAC9D,WAAW,EAAE,iBAAiB;KAC/B,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,OAAO;KACjB,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,iCAA0B,EAAE,CAAC;IAC7C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC;IACrF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;IACnF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iDAAiD,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;IACtE,IAAA,cAAK,EAAC,8BAA8B,CAAC;IAEnC,WAAA,IAAA,cAAK,EAAC,cAAc,CAAC,CAAA;IACrB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;;6CAFQ,iCAA0B;;6DAyCzC;iCA/HU,sBAAsB;IAJlC,IAAA,uBAAa,GAAE;IACf,IAAA,iBAAO,EAAC,cAAc,CAAC;IACvB,IAAA,mBAAU,EAAC,sBAAsB,CAAC;IAClC,IAAA,kBAAS,EAAC,6BAAc,CAAC;IAGrB,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;6CACL,yBAAW;QACH,yCAAmB;GAJvC,sBAAsB,CAgIlC","sourcesContent":["import {\n    Body,\n    Controller,\n    Inject,\n    Param,\n    Patch,\n    Res,\n    UseGuards,\n    Req\n} from '@nestjs/common';\nimport {\n    ApiBearerAuth,\n    ApiBody,\n    ApiOperation,\n    ApiParam,\n    ApiResponse,\n    ApiTags\n} from '@nestjs/swagger';\nimport { Request, Response } from 'express';\nimport { RestUtilities } from '../../Utilities';\nimport { AccessiOptions } from '../AccessiModule';\nimport { UpdateEnabledStatusRequest } from '../Dtos';\nimport { ConfiguratorService } from '../Services/ConfiguratorService/ConfiguratorService';\nimport { UserService } from '../Services/UserService/UserService';\nimport { JwtSimpleGuard } from '../jwt/jwt.strategy';\n\n@ApiBearerAuth()\n@ApiTags('Configurator')\n@Controller('accessi/configurator')\n@UseGuards(JwtSimpleGuard)\nexport class ConfiguratorController {\n  constructor(\n    @Inject('ACCESSI_OPTIONS') private readonly options: AccessiOptions,\n    private userService: UserService,\n    private configuratorService: ConfiguratorService\n  ) {}\n\n  @ApiOperation({\n    summary: 'Aggiorna lo stato di abilitazione di un menu',\n    operationId: 'setMenuEnabled',\n  })\n  @ApiParam({\n    name: 'codiceMenu',\n    description: 'Codice identificativo del menu da aggiornare',\n    required: true,\n    example: 'MNU001',\n  })\n  @ApiBody({ type: UpdateEnabledStatusRequest })\n  @ApiResponse({ status: 200, description: 'Stato del menu aggiornato con successo' })\n  @ApiResponse({ status: 400, description: 'Errore di validazione nei dati inviati' })\n  @ApiResponse({ status: 403, description: \"Utente non autorizzato ad eseguire l'operazione\" })\n  @ApiResponse({ status: 500, description: 'Errore interno del server' })\n  @Patch('menus/:codiceMenu/enabled')\n  async setMenuEnabled(\n    @Param('codiceMenu') codiceMenu: string,\n    @Body() body: UpdateEnabledStatusRequest,\n    @Req() req: Request,\n    @Res() res: Response,\n  ) {\n    try {\n      if (!codiceMenu) throw new Error('Il codice del menu � obbligatorio.');\n      if (body?.enabled === undefined) throw new Error('Lo stato di abilitazione � obbligatorio.');\n\n      const user = (req as any)?.user;\n      const codiceUtente = user?.utente?.codiceUtente;\n      if (!codiceUtente) {\n        return RestUtilities.sendErrorMessage(\n          res,\n          'Utente non riconosciuto dal token.',\n          ConfiguratorController.name,\n          401,\n        );\n      }\n\n      const canConfigure =\n        user?.utente?.flagAdminConfigurator ||\n        (await this.userService.isAdminConfigurator(codiceUtente));\n      if (!canConfigure) {\n        return RestUtilities.sendErrorMessage(\n          res,\n          'Utente non autorizzato ad aggiornare i menu.',\n          ConfiguratorController.name,\n          403,\n        );\n      }\n\n      await this.configuratorService.setMenuEnabled(codiceMenu, body.enabled);\n\n      const action = body.enabled ? 'abilitato' : 'disabilitato';\n      return RestUtilities.sendOKMessage(\n        res,\n        `Il menu ${codiceMenu} � stato ${action} con successo.`,\n      );\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, ConfiguratorController.name);\n    }\n  }\n\n  @ApiOperation({\n    summary: 'Aggiorna lo stato di abilitazione di un gruppo menu',\n    operationId: 'setGroupEnabled',\n  })\n  @ApiParam({\n    name: 'codiceGruppo',\n    description: 'Codice identificativo del gruppo da aggiornare',\n    required: true,\n    example: 'GRP01',\n  })\n  @ApiBody({ type: UpdateEnabledStatusRequest })\n  @ApiResponse({ status: 200, description: 'Stato del gruppo aggiornato con successo' })\n  @ApiResponse({ status: 400, description: 'Errore di validazione nei dati inviati' })\n  @ApiResponse({ status: 403, description: \"Utente non autorizzato ad eseguire l'operazione\" })\n  @ApiResponse({ status: 500, description: 'Errore interno del server' })\n  @Patch('groups/:codiceGruppo/enabled')\n  async setGroupEnabled(\n    @Param('codiceGruppo') codiceGruppo: string,\n    @Body() body: UpdateEnabledStatusRequest,\n    @Req() req: Request,\n    @Res() res: Response,\n  ) {\n    try {\n      if (!codiceGruppo) throw new Error('Il codice del gruppo � obbligatorio.');\n      if (body?.enabled === undefined) throw new Error('Lo stato di abilitazione � obbligatorio.');\n\n      const user = (req as any)?.user;\n      const codiceUtente = user?.utente?.codiceUtente;\n      if (!codiceUtente) {\n        return RestUtilities.sendErrorMessage(\n          res,\n          'Utente non riconosciuto dal token.',\n          ConfiguratorController.name,\n          401,\n        );\n      }\n\n      const canConfigure =\n        user?.utente?.flagAdminConfigurator ||\n        (await this.userService.isAdminConfigurator(codiceUtente));\n      if (!canConfigure) {\n        return RestUtilities.sendErrorMessage(\n          res,\n          'Utente non autorizzato ad aggiornare i gruppi menu.',\n          ConfiguratorController.name,\n          403,\n        );\n      }\n\n      await this.configuratorService.setGroupEnabled(codiceGruppo, body.enabled);\n\n      const action = body.enabled ? 'abilitato' : 'disabilitato';\n      return RestUtilities.sendOKMessage(\n        res,\n        `Il gruppo ${codiceGruppo} � stato ${action} con successo.`,\n      );\n    } catch (error) {\n      return RestUtilities.sendErrorMessage(res, error, ConfiguratorController.name);\n    }\n  }\n}\n"]}
+{"version":3,"file":"ConfiguratorController.js","sourceRoot":"","sources":["../../../src/accessi-module/Controllers/ConfiguratorController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6CAOyB;AAEzB,+CAAgD;AAEhD,kCAAqD;AACrD,6FAA0F;AAC1F,qEAAkE;AAClE,sDAAqD;AAM9C,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IACjC,YAC8C,OAAuB,EAC3D,WAAwB,EACxB,mBAAwC;QAFJ,YAAO,GAAP,OAAO,CAAgB;QAC3D,gBAAW,GAAX,WAAW,CAAa;QACxB,wBAAmB,GAAnB,mBAAmB,CAAqB;IAC/C,CAAC;IAkBE,cAAc,CACG,UAAkB,EAC/B,IAAgC,EACjC,GAAY,EACZ,GAAa;;;YAEpB,IAAI,CAAC;gBACH,IAAI,CAAC,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACvE,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO,MAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAE7F,MAAM,IAAI,GAAI,GAAW,aAAX,GAAG,uBAAH,GAAG,CAAU,IAAI,CAAC;gBAChC,MAAM,YAAY,GAAG,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,0CAAE,YAAY,CAAC;gBAChD,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,OAAO,yBAAa,CAAC,gBAAgB,CACnC,GAAG,EACH,oCAAoC,EACpC,wBAAsB,CAAC,IAAI,EAC3B,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAED,MAAM,YAAY,GAChB,CAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,0CAAE,qBAAqB;oBACnC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC7D,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,OAAO,yBAAa,CAAC,gBAAgB,CACnC,GAAG,EACH,8CAA8C,EAC9C,wBAAsB,CAAC,IAAI,EAC3B,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAED,MAAM,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBAExE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;gBAC3D,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,WAAW,UAAU,YAAY,MAAM,gBAAgB,CACxD,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,wBAAsB,CAAC,IAAI,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;KAAA;IAkBK,eAAe,CACI,YAAoB,EACnC,IAAgC,EACjC,GAAY,EACZ,GAAa;;;YAEpB,IAAI,CAAC;gBACH,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAC3E,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO,MAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAE7F,MAAM,IAAI,GAAI,GAAW,aAAX,GAAG,uBAAH,GAAG,CAAU,IAAI,CAAC;gBAChC,MAAM,YAAY,GAAG,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,0CAAE,YAAY,CAAC;gBAChD,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,OAAO,yBAAa,CAAC,gBAAgB,CACnC,GAAG,EACH,oCAAoC,EACpC,wBAAsB,CAAC,IAAI,EAC3B,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAED,MAAM,YAAY,GAChB,CAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,0CAAE,qBAAqB;oBACnC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC7D,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,OAAO,yBAAa,CAAC,gBAAgB,CACnC,GAAG,EACH,qDAAqD,EACrD,wBAAsB,CAAC,IAAI,EAC3B,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAED,MAAM,IAAI,CAAC,mBAAmB,CAAC,eAAe,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBAE3E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;gBAC3D,OAAO,yBAAa,CAAC,aAAa,CAChC,GAAG,EACH,aAAa,YAAY,YAAY,MAAM,gBAAgB,CAC5D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,yBAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,wBAAsB,CAAC,IAAI,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;KAAA;CACF,CAAA;AAhIY,wDAAsB;AAuB3B;IAhBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,gBAAgB;KAC9B,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,8CAA8C;QAC3D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,QAAQ;KAClB,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,iCAA0B,EAAE,CAAC;IAC7C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;IACnF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;IACnF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iDAAiD,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;IACtE,IAAA,cAAK,EAAC,2BAA2B,CAAC;IAEhC,WAAA,IAAA,cAAK,EAAC,YAAY,CAAC,CAAA;IACnB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;;6CAFQ,iCAA0B;;4DAyCzC;AAkBK;IAhBL,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,qDAAqD;QAC9D,WAAW,EAAE,iBAAiB;KAC/B,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,OAAO;KACjB,CAAC;IACD,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,iCAA0B,EAAE,CAAC;IAC7C,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC;IACrF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;IACnF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iDAAiD,EAAE,CAAC;IAC5F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;IACtE,IAAA,cAAK,EAAC,8BAA8B,CAAC;IAEnC,WAAA,IAAA,cAAK,EAAC,cAAc,CAAC,CAAA;IACrB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,GAAE,CAAA;;6CAFQ,iCAA0B;;6DAyCzC;iCA/HU,sBAAsB;IAJlC,IAAA,uBAAa,GAAE;IACf,IAAA,iBAAO,EAAC,cAAc,CAAC;IACvB,IAAA,mBAAU,EAAC,sBAAsB,CAAC;IAClC,IAAA,kBAAS,EAAC,6BAAc,CAAC;IAGrB,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;6CACL,yBAAW;QACH,yCAAmB;GAJvC,sBAAsB,CAgIlC","sourcesContent":["import {\r\n    Body,\r\n    Controller,\r\n    Inject,\r\n    Param,\r\n    Patch,\r\n    Res,\r\n    UseGuards,\r\n    Req\r\n} from '@nestjs/common';\r\nimport {\r\n    ApiBearerAuth,\r\n    ApiBody,\r\n    ApiOperation,\r\n    ApiParam,\r\n    ApiResponse,\r\n    ApiTags\r\n} from '@nestjs/swagger';\r\nimport { Request, Response } from 'express';\r\nimport { RestUtilities } from '../../Utilities';\r\nimport { AccessiOptions } from '../AccessiModule';\r\nimport { UpdateEnabledStatusRequest } from '../Dtos';\r\nimport { ConfiguratorService } from '../Services/ConfiguratorService/ConfiguratorService';\r\nimport { UserService } from '../Services/UserService/UserService';\r\nimport { JwtSimpleGuard } from '../jwt/jwt.strategy';\r\n\r\n@ApiBearerAuth()\r\n@ApiTags('Configurator')\r\n@Controller('accessi/configurator')\r\n@UseGuards(JwtSimpleGuard)\r\nexport class ConfiguratorController {\r\n  constructor(\r\n    @Inject('ACCESSI_OPTIONS') private readonly options: AccessiOptions,\r\n    private userService: UserService,\r\n    private configuratorService: ConfiguratorService\r\n  ) {}\r\n\r\n  @ApiOperation({\r\n    summary: 'Aggiorna lo stato di abilitazione di un menu',\r\n    operationId: 'setMenuEnabled',\r\n  })\r\n  @ApiParam({\r\n    name: 'codiceMenu',\r\n    description: 'Codice identificativo del menu da aggiornare',\r\n    required: true,\r\n    example: 'MNU001',\r\n  })\r\n  @ApiBody({ type: UpdateEnabledStatusRequest })\r\n  @ApiResponse({ status: 200, description: 'Stato del menu aggiornato con successo' })\r\n  @ApiResponse({ status: 400, description: 'Errore di validazione nei dati inviati' })\r\n  @ApiResponse({ status: 403, description: \"Utente non autorizzato ad eseguire l'operazione\" })\r\n  @ApiResponse({ status: 500, description: 'Errore interno del server' })\r\n  @Patch('menus/:codiceMenu/enabled')\r\n  async setMenuEnabled(\r\n    @Param('codiceMenu') codiceMenu: string,\r\n    @Body() body: UpdateEnabledStatusRequest,\r\n    @Req() req: Request,\r\n    @Res() res: Response,\r\n  ) {\r\n    try {\r\n      if (!codiceMenu) throw new Error('Il codice del menu � obbligatorio.');\r\n      if (body?.enabled === undefined) throw new Error('Lo stato di abilitazione � obbligatorio.');\r\n\r\n      const user = (req as any)?.user;\r\n      const codiceUtente = user?.utente?.codiceUtente;\r\n      if (!codiceUtente) {\r\n        return RestUtilities.sendErrorMessage(\r\n          res,\r\n          'Utente non riconosciuto dal token.',\r\n          ConfiguratorController.name,\r\n          401,\r\n        );\r\n      }\r\n\r\n      const canConfigure =\r\n        user?.utente?.flagAdminConfigurator ||\r\n        (await this.userService.isAdminConfigurator(codiceUtente));\r\n      if (!canConfigure) {\r\n        return RestUtilities.sendErrorMessage(\r\n          res,\r\n          'Utente non autorizzato ad aggiornare i menu.',\r\n          ConfiguratorController.name,\r\n          403,\r\n        );\r\n      }\r\n\r\n      await this.configuratorService.setMenuEnabled(codiceMenu, body.enabled);\r\n\r\n      const action = body.enabled ? 'abilitato' : 'disabilitato';\r\n      return RestUtilities.sendOKMessage(\r\n        res,\r\n        `Il menu ${codiceMenu} � stato ${action} con successo.`,\r\n      );\r\n    } catch (error) {\r\n      return RestUtilities.sendErrorMessage(res, error, ConfiguratorController.name);\r\n    }\r\n  }\r\n\r\n  @ApiOperation({\r\n    summary: 'Aggiorna lo stato di abilitazione di un gruppo menu',\r\n    operationId: 'setGroupEnabled',\r\n  })\r\n  @ApiParam({\r\n    name: 'codiceGruppo',\r\n    description: 'Codice identificativo del gruppo da aggiornare',\r\n    required: true,\r\n    example: 'GRP01',\r\n  })\r\n  @ApiBody({ type: UpdateEnabledStatusRequest })\r\n  @ApiResponse({ status: 200, description: 'Stato del gruppo aggiornato con successo' })\r\n  @ApiResponse({ status: 400, description: 'Errore di validazione nei dati inviati' })\r\n  @ApiResponse({ status: 403, description: \"Utente non autorizzato ad eseguire l'operazione\" })\r\n  @ApiResponse({ status: 500, description: 'Errore interno del server' })\r\n  @Patch('groups/:codiceGruppo/enabled')\r\n  async setGroupEnabled(\r\n    @Param('codiceGruppo') codiceGruppo: string,\r\n    @Body() body: UpdateEnabledStatusRequest,\r\n    @Req() req: Request,\r\n    @Res() res: Response,\r\n  ) {\r\n    try {\r\n      if (!codiceGruppo) throw new Error('Il codice del gruppo � obbligatorio.');\r\n      if (body?.enabled === undefined) throw new Error('Lo stato di abilitazione � obbligatorio.');\r\n\r\n      const user = (req as any)?.user;\r\n      const codiceUtente = user?.utente?.codiceUtente;\r\n      if (!codiceUtente) {\r\n        return RestUtilities.sendErrorMessage(\r\n          res,\r\n          'Utente non riconosciuto dal token.',\r\n          ConfiguratorController.name,\r\n          401,\r\n        );\r\n      }\r\n\r\n      const canConfigure =\r\n        user?.utente?.flagAdminConfigurator ||\r\n        (await this.userService.isAdminConfigurator(codiceUtente));\r\n      if (!canConfigure) {\r\n        return RestUtilities.sendErrorMessage(\r\n          res,\r\n          'Utente non autorizzato ad aggiornare i gruppi menu.',\r\n          ConfiguratorController.name,\r\n          403,\r\n        );\r\n      }\r\n\r\n      await this.configuratorService.setGroupEnabled(codiceGruppo, body.enabled);\r\n\r\n      const action = body.enabled ? 'abilitato' : 'disabilitato';\r\n      return RestUtilities.sendOKMessage(\r\n        res,\r\n        `Il gruppo ${codiceGruppo} � stato ${action} con successo.`,\r\n      );\r\n    } catch (error) {\r\n      return RestUtilities.sendErrorMessage(res, error, ConfiguratorController.name);\r\n    }\r\n  }\r\n}\r\n"]}

package/dist/accessi-module/Controllers/EmailController.d.ts

@@ -1,10 +1,10 @@
-import { Response, Request } from 'express';
+import { Request, Response } from 'express';
 import { AccessiOptions } from '../AccessiModule';
 import { EmailService } from '../Services/EmailService/EmailService';
 export declare class EmailController {
+    private readonly accessiOptions;
     private readonly emailService;
-    private readonly options;
-    constructor(emailService: EmailService, options: AccessiOptions);
+    constructor(accessiOptions: AccessiOptions, emailService: EmailService);
     serveResetPasswordPage(res: Response, token: string, returnUrl?: string): Promise<void>;
     sendPasswordResetEmail(request: Request, sendResetPasswordData: {
         email: string;

package/dist/accessi-module/Controllers/EmailController.js

@@ -28,10 +28,11 @@ const swagger_1 = require("@nestjs/swagger");
 const path_1 = require("path");
 const Utilities_1 = require("../../Utilities");
 const EmailService_1 = require("../Services/EmailService/EmailService");
+const publicAuthRateLimit_1 = require("../security/publicAuthRateLimit");
 let EmailController = EmailController_1 = class EmailController {
-    constructor(emailService, options) {
+    constructor(accessiOptions, emailService) {
+        this.accessiOptions = accessiOptions;
         this.emailService = emailService;
-        this.options = options;
     }
     serveResetPasswordPage(res, token, returnUrl) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -41,8 +42,12 @@ let EmailController = EmailController_1 = class EmailController {
     sendPasswordResetEmail(request, sendResetPasswordData, res) {
         return __awaiter(this, void 0, void 0, function* () {
             try {
-                yield this.emailService.sendPasswordResetEmail(sendResetPasswordData.email, sendResetPasswordData.htmlMail);
-                return Utilities_1.RestUtilities.sendOKMessage(res, "L'email di reset è stata inoltrata al destinatario.");
+                const rateLimitDecision = (0, publicAuthRateLimit_1.checkPublicAuthRateLimit)(this.accessiOptions, 'passwordResetEmail', request, [sendResetPasswordData === null || sendResetPasswordData === void 0 ? void 0 : sendResetPasswordData.email]);
+                if (!rateLimitDecision.allowed) {
+                    return (0, publicAuthRateLimit_1.sendPublicAuthRateLimitExceeded)(res, rateLimitDecision.retryAfterSeconds);
+                }
+                yield this.emailService.sendPasswordResetEmail(sendResetPasswordData.email);
+                return Utilities_1.RestUtilities.sendOKMessage(res, "Se l'account esiste, l'email di reset e stata inoltrata al destinatario.");
             }
             catch (error) {
                 return Utilities_1.RestUtilities.sendErrorMessage(res, error, EmailController_1.name);
@@ -59,7 +64,7 @@ __decorate([
     (0, swagger_1.ApiParam)({ name: 'token', description: 'Token per il reset della password', required: true }),
     (0, swagger_1.ApiQuery)({
         name: 'returnUrl',
-        description: 'Url di ritorno della pagina. Default: https://google.com',
+        description: 'Url di ritorno della pagina',
         required: false,
     }),
     (0, swagger_1.ApiResponse)({ status: 200, description: 'Pagina di reset password servita con successo' }),
@@ -83,20 +88,15 @@ __decorate([
                     type: 'string',
                     description: "L'email dell'utente che richiede il reset",
                 },
-                htmlMail: {
-                    type: 'string',
-                    description: 'Corpo della mail in HTML',
-                },
             },
             required: ['email'],
         },
     }),
-    (0, swagger_1.ApiResponse)({ status: 200, description: "L'email di reset è stata inviata con successo" }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: "L'email di reset e stata gestita con successo" }),
     (0, swagger_1.ApiResponse)({
-        status: 400,
-        description: 'Errore nella richiesta: protocollo o host non impostati',
+        status: 500,
+        description: "Errore interno durante l'invio dell'email",
     }),
-    (0, swagger_1.ApiResponse)({ status: 500, description: "Errore interno durante l'invio dell'email" }),
     (0, common_1.Post)('send-reset-password-email'),
     __param(0, (0, common_1.Req)()),
     __param(1, (0, common_1.Body)()),
@@ -108,7 +108,7 @@ __decorate([
 exports.EmailController = EmailController = EmailController_1 = __decorate([
     (0, swagger_1.ApiTags)('Email'),
     (0, common_1.Controller)('accessi/email'),
-    __param(1, (0, common_1.Inject)('ACCESSI_OPTIONS')),
-    __metadata("design:paramtypes", [EmailService_1.EmailService, Object])
+    __param(0, (0, common_1.Inject)('ACCESSI_OPTIONS')),
+    __metadata("design:paramtypes", [Object, EmailService_1.EmailService])
 ], EmailController);
 //# sourceMappingURL=EmailController.js.map